(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000040)={0x0, 0x1c, 0x34}}}, @free_buffer={0x40086303, r3}], 0xe, 0x0, &(0x7f0000000140)="459cd14565fdac2547ba1384bc28"}) 14:12:06 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xe00}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000040)={0x0, 0x1c, 0x34}}}, @free_buffer={0x40086303, r3}], 0xe, 0x0, &(0x7f0000000140)="459cd14565fdac2547ba1384bc28"}) 14:12:06 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f0000000080)=@abs, 0x6e) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f00000000c0)={0x0, 0xfb, 0x44, 0x4, 0x20, "f298c0a1ec4e3c8afa31eddc3e2fbbd3", "df0345231da9862306eb6bd0f5518f3646a72bf4b1e30db906c3c3a2861578248604cea618155564e2e6925a50df26"}, 0x44, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='reno\x00', 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3, @mcast1, 0x1105}}, 0x0, 0x0, 0x43, 0x0, "a3227ed3b72b5accad37dc4ba1801320fc82cd432392046fff25090076b8246b45ee574d6cd98bf20a2005a32e5a97be9bb891cae16f1b7f0de9cf467961ab2f6027a4eaf3c25797f44724ad1b0c5ef3"}, 0xd8) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r2, r5) [ 3407.342224][T11946] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000040)={0x0, 0x1c, 0x34}}}, @free_buffer={0x40086303, r3}], 0xe, 0x0, &(0x7f0000000140)="459cd14565fdac2547ba1384bc28"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x50, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x9, 0x1, 0x3}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000040)={0x0, 0x1c, 0x34}}}, @free_buffer={0x40086303, r3}], 0xe, 0x0, &(0x7f0000000140)="459cd14565fdac2547ba1384bc28"}) (async) 14:12:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2e63ff40799f8c836a3fdaa40bf42c9e60513102fa543fbc6ba70923dcd561114c0d7b82004dcf131fa600000000f00100002dc701a386d53de4a9608b08d36a35986e063fa6cc22a2f2b9da6efe9dd1cfa63430586b7f3e1706d9fc750effffffff34f9c8"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2e63ff40799f8c836a3fdaa40bf42c9e60513102fa543fbc6ba70923dcd561114c0d7b82004dcf131fa600000000f00100002dc701a386d53de4a9608b08d36a35986e063fa6cc22a2f2b9da6efe9dd1cfa63430586b7f3e1706d9fc750effffffff34f9c8"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3407.544908][T11975] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:06 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2e63ff40799f8c836a3fdaa40bf42c9e60513102fa543fbc6ba70923dcd561114c0d7b82004dcf131fa600000000f00100002dc701a386d53de4a9608b08d36a35986e063fa6cc22a2f2b9da6efe9dd1cfa63430586b7f3e1706d9fc750effffffff34f9c8"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2e63ff40799f8c836a3fdaa40bf42c9e60513102fa543fbc6ba70923dcd561114c0d7b82004dcf131fa600000000f00100002dc701a386d53de4a9608b08d36a35986e063fa6cc22a2f2b9da6efe9dd1cfa63430586b7f3e1706d9fc750effffffff34f9c8"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:06 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) (async) r1 = dup(r0) bind$unix(r1, &(0x7f0000000080)=@abs, 0x6e) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f00000000c0)={0x0, 0xfb, 0x44, 0x4, 0x20, "f298c0a1ec4e3c8afa31eddc3e2fbbd3", "df0345231da9862306eb6bd0f5518f3646a72bf4b1e30db906c3c3a2861578248604cea618155564e2e6925a50df26"}, 0x44, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) (async) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='reno\x00', 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3, @mcast1, 0x1105}}, 0x0, 0x0, 0x43, 0x0, "a3227ed3b72b5accad37dc4ba1801320fc82cd432392046fff25090076b8246b45ee574d6cd98bf20a2005a32e5a97be9bb891cae16f1b7f0de9cf467961ab2f6027a4eaf3c25797f44724ad1b0c5ef3"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3, @mcast1, 0x1105}}, 0x0, 0x0, 0x43, 0x0, "a3227ed3b72b5accad37dc4ba1801320fc82cd432392046fff25090076b8246b45ee574d6cd98bf20a2005a32e5a97be9bb891cae16f1b7f0de9cf467961ab2f6027a4eaf3c25797f44724ad1b0c5ef3"}, 0xd8) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r2, r5) 14:12:06 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, 0x0, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:06 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x150, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x18, 0x30, 0x80, 0x8, {0x4e24, 0x4e24, [0x5, 0x7fffffff, 0x100, 0x3], [0x200, 0x10000, 0xff, 0x9], 0x0, [0x101, 0x1beb]}, 0x8001, 0x67}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "8d21985d842f102e2e46ead6d7cc1d3c740b243dcd515f1d5be6034d0c443e33673c7840abc24c958215c58893c558299cb174cddadf718c3b049ae33d671053aa181eeff5032883947a4cf2bcd88e85aacc2b0f593804151dbf0a7a64a302486e74a92f3fd16d05813ef605128b6c00b14bda455a8499b43558462c6f67618ac816eae4b1968cbfbc8e9723e7bf375ccff23313db62cca950d99850969dfb52db9c315a09cada2384e61b0c994e8c3ae37bb1a07d72417e6faec9d6c3d33e3adb88f51b4f1fed589ab8718d8665ec2475762a5ce3cf614b40feeb66771e"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '[J'}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "3f2541c0cb161dd2f18eb595bdf5ea7439cf"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040041}, 0x2000c040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$FITHAW(r0, 0xc0045878) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:06 executing program 3: socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x150, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x18, 0x30, 0x80, 0x8, {0x4e24, 0x4e24, [0x5, 0x7fffffff, 0x100, 0x3], [0x200, 0x10000, 0xff, 0x9], 0x0, [0x101, 0x1beb]}, 0x8001, 0x67}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "8d21985d842f102e2e46ead6d7cc1d3c740b243dcd515f1d5be6034d0c443e33673c7840abc24c958215c58893c558299cb174cddadf718c3b049ae33d671053aa181eeff5032883947a4cf2bcd88e85aacc2b0f593804151dbf0a7a64a302486e74a92f3fd16d05813ef605128b6c00b14bda455a8499b43558462c6f67618ac816eae4b1968cbfbc8e9723e7bf375ccff23313db62cca950d99850969dfb52db9c315a09cada2384e61b0c994e8c3ae37bb1a07d72417e6faec9d6c3d33e3adb88f51b4f1fed589ab8718d8665ec2475762a5ce3cf614b40feeb66771e"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '[J'}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "3f2541c0cb161dd2f18eb595bdf5ea7439cf"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040041}, 0x2000c040) (async) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x150, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x18, 0x30, 0x80, 0x8, {0x4e24, 0x4e24, [0x5, 0x7fffffff, 0x100, 0x3], [0x200, 0x10000, 0xff, 0x9], 0x0, [0x101, 0x1beb]}, 0x8001, 0x67}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "8d21985d842f102e2e46ead6d7cc1d3c740b243dcd515f1d5be6034d0c443e33673c7840abc24c958215c58893c558299cb174cddadf718c3b049ae33d671053aa181eeff5032883947a4cf2bcd88e85aacc2b0f593804151dbf0a7a64a302486e74a92f3fd16d05813ef605128b6c00b14bda455a8499b43558462c6f67618ac816eae4b1968cbfbc8e9723e7bf375ccff23313db62cca950d99850969dfb52db9c315a09cada2384e61b0c994e8c3ae37bb1a07d72417e6faec9d6c3d33e3adb88f51b4f1fed589ab8718d8665ec2475762a5ce3cf614b40feeb66771e"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '[J'}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "3f2541c0cb161dd2f18eb595bdf5ea7439cf"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040041}, 0x2000c040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$FITHAW(r0, 0xc0045878) (async) ioctl$FITHAW(r0, 0xc0045878) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:06 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f0000000080)=@abs, 0x6e) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000280), &(0x7f00000000c0)={0x0, 0xfb, 0x44, 0x4, 0x20, "f298c0a1ec4e3c8afa31eddc3e2fbbd3", "df0345231da9862306eb6bd0f5518f3646a72bf4b1e30db906c3c3a2861578248604cea618155564e2e6925a50df26"}, 0x44, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) (async) dup(r3) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000240)='reno\x00', 0x5) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3, @mcast1, 0x1105}}, 0x0, 0x0, 0x43, 0x0, "a3227ed3b72b5accad37dc4ba1801320fc82cd432392046fff25090076b8246b45ee574d6cd98bf20a2005a32e5a97be9bb891cae16f1b7f0de9cf467961ab2f6027a4eaf3c25797f44724ad1b0c5ef3"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e24, 0x3, @mcast1, 0x1105}}, 0x0, 0x0, 0x43, 0x0, "a3227ed3b72b5accad37dc4ba1801320fc82cd432392046fff25090076b8246b45ee574d6cd98bf20a2005a32e5a97be9bb891cae16f1b7f0de9cf467961ab2f6027a4eaf3c25797f44724ad1b0c5ef3"}, 0xd8) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r2, r5) 14:12:07 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x150, 0x13, 0x20, 0x70bd26, 0x25dfdbfb, {0x18, 0x30, 0x80, 0x8, {0x4e24, 0x4e24, [0x5, 0x7fffffff, 0x100, 0x3], [0x200, 0x10000, 0xff, 0x9], 0x0, [0x101, 0x1beb]}, 0x8001, 0x67}, [@INET_DIAG_REQ_BYTECODE={0xe2, 0x1, "8d21985d842f102e2e46ead6d7cc1d3c740b243dcd515f1d5be6034d0c443e33673c7840abc24c958215c58893c558299cb174cddadf718c3b049ae33d671053aa181eeff5032883947a4cf2bcd88e85aacc2b0f593804151dbf0a7a64a302486e74a92f3fd16d05813ef605128b6c00b14bda455a8499b43558462c6f67618ac816eae4b1968cbfbc8e9723e7bf375ccff23313db62cca950d99850969dfb52db9c315a09cada2384e61b0c994e8c3ae37bb1a07d72417e6faec9d6c3d33e3adb88f51b4f1fed589ab8718d8665ec2475762a5ce3cf614b40feeb66771e"}, @INET_DIAG_REQ_BYTECODE={0x6, 0x1, '[J'}, @INET_DIAG_REQ_BYTECODE={0x16, 0x1, "3f2541c0cb161dd2f18eb595bdf5ea7439cf"}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040041}, 0x2000c040) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$FITHAW(r0, 0xc0045878) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x48, 0x64, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x8, 0x6}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x67, 0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = dup3(r2, r1, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000001c0)) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0xfffffffffffffd55, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:07 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) 14:12:07 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x74, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x48, 0x64, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x8, 0x6}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x67, 0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = dup3(r2, r1, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000001c0)) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0xfffffffffffffd55, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00'}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x48, 0x64, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x8, 0x6}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x67, 0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) dup3(r2, r1, 0x0) (async) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000001c0)) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r5) (async) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x1000, 0x0) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0xfffffffffffffd55, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) dup2(r0, r2) close(r1) r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x640080, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f20c06635200000000f22c00f0013660f64070f238fb81d008ed8baa100b8a534ef66b8010000000f01d93e660f3882861c28640f2263ba4300b80000ef", 0x3e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype3={0x5, 0x6}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) 14:12:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newchain={0x48, 0x64, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x8, 0x6}, {0xfff3, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x67, 0x8}}, @filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x1f}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r4 = dup3(r2, r1, 0x0) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000001c0)) (async) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f00000001c0)) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r5) (async) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = openat$binderfs(0xffffff9c, &(0x7f0000000140)='./binderfs2/custom1\x00', 0x1000, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0xfffffffffffffd55, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r4], 0xfffffffffffffd55, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3408.655725][T12021] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:07 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1273}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3408.937421][T12021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:07 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/26, 0x1a, 0x0, 0xf}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}, @acquire={0x40046305, 0x3}], 0xe8, 0x0, &(0x7f0000000300)="b67f523cbc16950b36605397543bcf7b042ad888465ec76479995ed1afeaf2cb7ccd2f87ba619cff924e686c374726e5ad1f1e4d7ed708d3a88ed2f54ad6a95ded38d307e955e9538c508298b9ed0ea21a4bc6d77196fc448a48e7b0ce1d7ae78d3c390d09b23d9cad21b8e262e628c78033a569731ba4baa256fb8b903741806ca21eb1337a9a058eadbb70cee22eaac426ba7b0d499ef0445da26ce200daac063a7cb501b1700702a13285a0218b3b3a6f0c20c9d4ec1eb540c111b47d7157ea1faa56f20385fab8cd2932179d7a900875df66c8dfbc7731861863c33c631e76f441c275cb2050"}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe4) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x200000, 0x1000, 0x0, 0x2, 0x5}}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3409.190149][T12038] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) dup2(r0, r2) close(r1) (async) r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x640080, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f20c06635200000000f22c00f0013660f64070f238fb81d008ed8baa100b8a534ef66b8010000000f01d93e660f3882861c28640f2263ba4300b80000ef", 0x3e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype3={0x5, 0x6}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) 14:12:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/26, 0x1a, 0x0, 0xf}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}, @acquire={0x40046305, 0x3}], 0xe8, 0x0, &(0x7f0000000300)="b67f523cbc16950b36605397543bcf7b042ad888465ec76479995ed1afeaf2cb7ccd2f87ba619cff924e686c374726e5ad1f1e4d7ed708d3a88ed2f54ad6a95ded38d307e955e9538c508298b9ed0ea21a4bc6d77196fc448a48e7b0ce1d7ae78d3c390d09b23d9cad21b8e262e628c78033a569731ba4baa256fb8b903741806ca21eb1337a9a058eadbb70cee22eaac426ba7b0d499ef0445da26ce200daac063a7cb501b1700702a13285a0218b3b3a6f0c20c9d4ec1eb540c111b47d7157ea1faa56f20385fab8cd2932179d7a900875df66c8dfbc7731861863c33c631e76f441c275cb2050"}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe4) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x200000, 0x1000, 0x0, 0x2, 0x5}}, 0x50) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:08 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/26, 0x1a, 0x0, 0xf}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}, @acquire={0x40046305, 0x3}], 0xe8, 0x0, &(0x7f0000000300)="b67f523cbc16950b36605397543bcf7b042ad888465ec76479995ed1afeaf2cb7ccd2f87ba619cff924e686c374726e5ad1f1e4d7ed708d3a88ed2f54ad6a95ded38d307e955e9538c508298b9ed0ea21a4bc6d77196fc448a48e7b0ce1d7ae78d3c390d09b23d9cad21b8e262e628c78033a569731ba4baa256fb8b903741806ca21eb1337a9a058eadbb70cee22eaac426ba7b0d499ef0445da26ce200daac063a7cb501b1700702a13285a0218b3b3a6f0c20c9d4ec1eb540c111b47d7157ea1faa56f20385fab8cd2932179d7a900875df66c8dfbc7731861863c33c631e76f441c275cb2050"}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe4) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x200000, 0x1000, 0x0, 0x2, 0x5}}, 0x50) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x54, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/26, 0x1a, 0x0, 0xf}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x40}, @acquire={0x40046305, 0x3}], 0xe8, 0x0, &(0x7f0000000300)="b67f523cbc16950b36605397543bcf7b042ad888465ec76479995ed1afeaf2cb7ccd2f87ba619cff924e686c374726e5ad1f1e4d7ed708d3a88ed2f54ad6a95ded38d307e955e9538c508298b9ed0ea21a4bc6d77196fc448a48e7b0ce1d7ae78d3c390d09b23d9cad21b8e262e628c78033a569731ba4baa256fb8b903741806ca21eb1337a9a058eadbb70cee22eaac426ba7b0d499ef0445da26ce200daac063a7cb501b1700702a13285a0218b3b3a6f0c20c9d4ec1eb540c111b47d7157ea1faa56f20385fab8cd2932179d7a900875df66c8dfbc7731861863c33c631e76f441c275cb2050"}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private0}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe4) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r3) (async) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x27, 0x5, 0x200000, 0x1000, 0x0, 0x2, 0x5}}, 0x50) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:08 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 14:12:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) dup2(r0, r2) close(r1) r4 = openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x640080, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f20c06635200000000f22c00f0013660f64070f238fb81d008ed8baa100b8a534ef66b8010000000f01d93e660f3882861c28640f2263ba4300b80000ef", 0x3e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype3={0x5, 0x6}], 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1}) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) dup2(r0, r2) (async) close(r1) (async) openat$proc_capi20(0xffffff9c, &(0x7f0000000080), 0x640080, 0x0) (async) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000140)="0f20c06635200000000f22c00f0013660f64070f238fb81d008ed8baa100b8a534ef66b8010000000f01d93e660f3882861c28640f2263ba4300b80000ef", 0x3e}], 0x1, 0x20, &(0x7f00000001c0)=[@cstype3={0x5, 0x6}], 0x1) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) (async) 14:12:09 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:09 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x7a, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3410.526342][T12081] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x400000) [ 3410.650775][T12081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:09 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1f00}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002cc0)={0x13c, 0x0, &(0x7f0000002b00)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x5, 0x4, 0x3d}, @flat=@handle={0x73682a85, 0x2000, 0x3}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001740)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/213, 0xd5, 0x1, 0x15}}, &(0x7f00000017c0)={0x0, 0x18, 0x34}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002880)={@ptr={0x70742a85, 0x1, &(0x7f0000001800)=""/69, 0x45, 0x1}, @flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000001880)=""/4096, 0x1000, 0x0, 0x36}}, &(0x7f0000002900)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002a40)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000002940)=""/236, 0xec, 0x2, 0xa}}, &(0x7f0000002ac0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x74, 0x0, &(0x7f0000002c40)="ec691eaa03ebfe83c7c0b0aac811120d1afa6183c763931438280feaa08f569426d7ff0500bdc376002aced0b256a643a68062064698fde18299fac62158208b4a56477086052258c6477727030b8229a45745ca3d8530d255ef68207cb3ce99aeb11f9b19a1c5d4857911ba7846a6f7b7fc43a8"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x8001) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000380)=[@dead_binder_done, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x3}, @decrefs], 0x0, 0x0, 0x0}) dup2(r7, r5) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = dup3(r5, r8, 0x0) r10 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x1, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/117, 0x75, 0x0, 0x31}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x1c, 0x44}}}, @free_buffer={0x40086303, r10}, @decrefs={0x40046307, 0x1}], 0x1000, 0x0, &(0x7f0000000740)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:09 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 14:12:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x400000) 14:12:09 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002cc0)={0x13c, 0x0, &(0x7f0000002b00)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x5, 0x4, 0x3d}, @flat=@handle={0x73682a85, 0x2000, 0x3}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001740)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/213, 0xd5, 0x1, 0x15}}, &(0x7f00000017c0)={0x0, 0x18, 0x34}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002880)={@ptr={0x70742a85, 0x1, &(0x7f0000001800)=""/69, 0x45, 0x1}, @flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000001880)=""/4096, 0x1000, 0x0, 0x36}}, &(0x7f0000002900)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002a40)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000002940)=""/236, 0xec, 0x2, 0xa}}, &(0x7f0000002ac0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x74, 0x0, &(0x7f0000002c40)="ec691eaa03ebfe83c7c0b0aac811120d1afa6183c763931438280feaa08f569426d7ff0500bdc376002aced0b256a643a68062064698fde18299fac62158208b4a56477086052258c6477727030b8229a45745ca3d8530d255ef68207cb3ce99aeb11f9b19a1c5d4857911ba7846a6f7b7fc43a8"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x8001) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000380)=[@dead_binder_done, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x3}, @decrefs], 0x0, 0x0, 0x0}) (async) dup2(r7, r5) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = dup3(r5, r8, 0x0) (async) r10 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x1, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/117, 0x75, 0x0, 0x31}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x1c, 0x44}}}, @free_buffer={0x40086303, r10}, @decrefs={0x40046307, 0x1}], 0x1000, 0x0, &(0x7f0000000740)="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"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3411.117578][T12094] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000003c0)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002cc0)={0x13c, 0x0, &(0x7f0000002b00)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r6}, @fda={0x66646185, 0x5, 0x4, 0x3d}, @flat=@handle={0x73682a85, 0x2000, 0x3}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @enter_looper, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001740)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/213, 0xd5, 0x1, 0x15}}, &(0x7f00000017c0)={0x0, 0x18, 0x34}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002880)={@ptr={0x70742a85, 0x1, &(0x7f0000001800)=""/69, 0x45, 0x1}, @flat=@weak_binder={0x77622a85, 0x10b, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000001880)=""/4096, 0x1000, 0x0, 0x36}}, &(0x7f0000002900)={0x0, 0x28, 0x40}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002a40)={@fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000002940)=""/236, 0xec, 0x2, 0xa}}, &(0x7f0000002ac0)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x1}], 0x74, 0x0, &(0x7f0000002c40)="ec691eaa03ebfe83c7c0b0aac811120d1afa6183c763931438280feaa08f569426d7ff0500bdc376002aced0b256a643a68062064698fde18299fac62158208b4a56477086052258c6477727030b8229a45745ca3d8530d255ef68207cb3ce99aeb11f9b19a1c5d4857911ba7846a6f7b7fc43a8"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x8001) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000380)=[@dead_binder_done, @release={0x40046306, 0x1}, @acquire={0x40046305, 0x3}, @decrefs], 0x0, 0x0, 0x0}) (async) dup2(r7, r5) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r9 = dup3(r5, r8, 0x0) r10 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x6, 0x1, 0x21}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/117, 0x75, 0x0, 0x31}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000240)={0x0, 0x1c, 0x44}}}, @free_buffer={0x40086303, r10}, @decrefs={0x40046307, 0x1}], 0x1000, 0x0, &(0x7f0000000740)="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"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) (async) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x400000) 14:12:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x804, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x184, 0x0, &(0x7f00000007c0)=[@free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/156, 0x9c, 0x2, 0x37}, @fda={0x66646185, 0x4, 0x0, 0x3a}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/94, 0x5e, 0x2, 0x3d}, @flat=@weak_binder={0x77622a85, 0x100b, 0x1}, @fda={0x66646185, 0x5, 0x0, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/14, 0xe, 0x2, 0x3b}, @fda={0x66646185, 0xa, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000004c0)={0x0, 0x28, 0x44}}}, @enter_looper, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r6}, @flat=@weak_handle, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000740)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x9d, 0x0, &(0x7f0000000980)="a98f034efb6315464cca64d78505fbbe84e0eac4377f03c240cfd8516bf85677c4b7712373f7305e80f10a20f39d647b9ef5083bb46c038b4c402b306c1fa85813115e780df078836ba0312ed7cb9054bdc106999911a4c16fd928070b8b2f91b34b0bcd092f79dc4e96c471c59a4906dfe7e9c630aeee1963f56fc6c71960ca1e4f6b7b1e37dfbc057d6918fb328c7865ce18f7ac5615701a9eb60c20"}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x804, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) (async) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r7) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x184, 0x0, &(0x7f00000007c0)=[@free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/156, 0x9c, 0x2, 0x37}, @fda={0x66646185, 0x4, 0x0, 0x3a}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/94, 0x5e, 0x2, 0x3d}, @flat=@weak_binder={0x77622a85, 0x100b, 0x1}, @fda={0x66646185, 0x5, 0x0, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/14, 0xe, 0x2, 0x3b}, @fda={0x66646185, 0xa, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000004c0)={0x0, 0x28, 0x44}}}, @enter_looper, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r6}, @flat=@weak_handle, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000740)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x9d, 0x0, &(0x7f0000000980)="a98f034efb6315464cca64d78505fbbe84e0eac4377f03c240cfd8516bf85677c4b7712373f7305e80f10a20f39d647b9ef5083bb46c038b4c402b306c1fa85813115e780df078836ba0312ed7cb9054bdc106999911a4c16fd928070b8b2f91b34b0bcd092f79dc4e96c471c59a4906dfe7e9c630aeee1963f56fc6c71960ca1e4f6b7b1e37dfbc057d6918fb328c7865ce18f7ac5615701a9eb60c20"}) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) dup2(r0, r3) 14:12:10 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 32) dup3(r1, r0, 0x0) (async, rerun: 32) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x804, 0x0) (async, rerun: 64) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) dup(r3) (async, rerun: 64) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r7) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000a40)={0x184, 0x0, &(0x7f00000007c0)=[@free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/156, 0x9c, 0x2, 0x37}, @fda={0x66646185, 0x4, 0x0, 0x3a}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/94, 0x5e, 0x2, 0x3d}, @flat=@weak_binder={0x77622a85, 0x100b, 0x1}, @fda={0x66646185, 0x5, 0x0, 0x3}}, &(0x7f0000000380)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/14, 0xe, 0x2, 0x3b}, @fda={0x66646185, 0xa, 0x1, 0x1d}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000004c0)={0x0, 0x28, 0x44}}}, @enter_looper, @request_death={0x400c630e, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r6}, @flat=@weak_handle, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000740)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @flat=@handle={0x73682a85, 0x10b, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}}], 0x9d, 0x0, &(0x7f0000000980)="a98f034efb6315464cca64d78505fbbe84e0eac4377f03c240cfd8516bf85677c4b7712373f7305e80f10a20f39d647b9ef5083bb46c038b4c402b306c1fa85813115e780df078836ba0312ed7cb9054bdc106999911a4c16fd928070b8b2f91b34b0bcd092f79dc4e96c471c59a4906dfe7e9c630aeee1963f56fc6c71960ca1e4f6b7b1e37dfbc057d6918fb328c7865ce18f7ac5615701a9eb60c20"}) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:10 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0xf0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:11 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 14:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff}) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) dup2(r0, r3) [ 3412.293972][T12136] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3bbc236b0a00"/20], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) 14:12:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3bbc236b0a00"/20], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) socket$packet(0x11, 0x3, 0x300) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3bbc236b0a00"/20], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) 14:12:11 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x2, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000000)) dup2(r0, r3) 14:12:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="3bbc236b0a00"/20], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) [ 3412.711390][T12136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) [ 3412.870759][T12161] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc4, 0x0, &(0x7f0000000280)=[@exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x2, 0x11}, @fda={0x66646185, 0x3, 0x0, 0x23}}, &(0x7f0000000080)={0x0, 0x1c, 0x44}}}, @acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done, @increfs={0x40046304, 0x1}, @register_looper, @release, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x8, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x1c, 0x38}}, 0x40}], 0x1000, 0x0, &(0x7f0000000740)="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"}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) 14:12:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc4, 0x0, &(0x7f0000000280)=[@exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x2, 0x11}, @fda={0x66646185, 0x3, 0x0, 0x23}}, &(0x7f0000000080)={0x0, 0x1c, 0x44}}}, @acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done, @increfs={0x40046304, 0x1}, @register_looper, @release, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x8, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x1c, 0x38}}, 0x40}], 0x1000, 0x0, &(0x7f0000000740)="7ef24fc364c95a70608e546b90356ca01a18232ce4c3f428e0b1c69165b93a2c378b475fc7506be57efcb566661ea44c0adf3d1ce2346ea2243016d644b35618fd2aaccd0e3c616b21049c2acccc04aff098c084f62c51d0438bcb05086e7791d46b9c2d89d40133d8eeea91045f7d9777cd57160194275311f0d832f2e7a34567d1898e0abf56e1e1592ddb3e72721468177ce096872806827ef16cd86f45241ab14d6739e1e163e79a0f526bc7853c141d2a50a2d578cbbbbbd45afb5a7a55845f9a7ff3572a576f02c680429f55fc7874d987f5a259f91568b07acc564325427b5c626c5d7990a3f9dcc6ddbfb3e181c74508198e570cf2ca9009f3ca9276603b5d8cc854abee250a14f84088dc3be9e770fe378ba937e8e12bd34b0f36ea239d6aae402656125e729e1ef0853582b2ad4ae7a59e15989b07d0fbccd1cf080c02202713bd06798c52eca0bf5b6befb482322a76fa7a76b87ee590a426c09f4c2cce7947fdf18e77aad9a4d9aac48e1863c236154fa8009722df0740fcc502a964df7e349f548b2070661fab4e7cfa6f35670c9fdbb1e4501ed25c5e720dd4a5797e7346d8ec4a184ce766e8c02b773efba8f2b02e874c15928db4665b9c24646fb5d9643f1fce9dee588c5bb030bcd6c9913ded5b5658f71dea6bb623abb61957e377c9a8cc9061b922520d44fd41c6bcd6a3df86169db99b95e6ba1eb1b23a9be47fc9f507c11ca7eac83e6e89246af28a490e3e6976824690e0fb3363da5423233ad981a3ce263c4eadd1b899ad623e1a39b2fe26e84046ab82c0cb8ce2e9255ceafa395f4aeb2e17222d351b473a4e77965d38f195ca8146e67e4c96eae1044596f4d16ada040de975c610c6dbb76f59b23c3c26d13f3e3c3f5d13d6fc1a5fc38986803526fc4c884526e548cfe1e781c2b3a34179bb3646aad3026779241b0376480147d2e9ed489e296322fd6d65fd75a097a82fd5e451f0d46051ffe2da2931c6b261603a00239114e3f213f2bc86b76e8b9330bf76204a74fff6978d60579cfc433d37b124f929dd293713ce96387afff1ae4e0e5225fac1526917f313230f85c1eafe37c8ed01ae3f5bc5d065eb865441c0c27cf101e523b9c40e8304727da13996d97848c7d27f5130dc4f2daa19dc327bb936d7b71a0415dedb28bfa186972c8ecae21c0d894174ad0daa2f2d7679524551147b380bedbfab7c8297db3fea0927169fde79866e5b887fd152027d219e0852bc30e03585fcfbea79221e9ad9934e8544de5c2cc4929689a9644668289c19d12dcd475517f5ed55d1020e957fb91ccecca7d705063ff11cfc56467a70c377ff51ce7eedc5ea026e2a3cdf4573912520daaf882a9a99ee6963a5113e816fb2f8821907648edae59b78d23bba57c317b4a02595cb99f0f965cdf56df778ae288d568480579bebfedd8c4d0a7e52eb3bc79bf6b90ebbeccaa7139b06d43e0d0d0091c47d535c4a64bf35863f50c674105db0d47d5d9653759bd7144160d9f8928df662b47ef62b074a3333a473c1a8c2dd735829c45f0157a597ff63810cadc947657803c8a7f227e8a98eaef76b801362f8fe44767977e3166f0ce1ea7d547fa95d30bf75bad235dca3f58cdbffc56c2e8f0adeb1ee1eaa5d28935bd098007c8fcbf0601df8517580af054f41a187e704ff45f0758a333c27a349986cce704ee74f128d55529d29d32042ed3a4bda9d7c0c3b4444fd8bc5b9de83ee1c819962655e16eee63e719508c9262e98bfb695ae450b5f2d49d6aac783f994ee5d993cd2eae7d068cd006a1e80d06bb6f8bf80117b9e22aababde86c438ac2aa16fb1b11acece68d6e0cecac813ccdcc869f6d4700b55691374e5e577cbc3eaedc59a4cfd3d11ff15c8ceb02fb2fb03ea3172f44b2ef8b92a82e3ed5e06cada36470f7d12f9953ea17c8194ab9bb0fe842f7ab01105279b20702b7f74e941503392b439053fae468303d85661be18a8323142df8f225023fc6eaaf84094d0e680d7b7fa2054625e2c7cdfad21dc919f2fc27ca5eacd979a192a55e1fafdc7cc893e7d9fb803750dd3436afbfbf7f888375f587edc6c999fcb1da1dfb2522bf0fd9542d5aacec70c941f9753edbfd1ec8b0d01ea743ba43b378d5fb3e6d0f8e5735d888c37c8d607723362c7cc9918f13a87a670879c2edd7a7bf1c6675c64adc7970bfd2e0f98be894bc2c12a823d0353b3c1bf5c0351781265d765052937b4f3c3897f0610819e46c1dead629b8779571f30d45f4699cb8e256f2b8f8682628eccca485c83346277da60bcb22ebebff8fa03792c7e9a70ed7e16f2ce6bf8f4df64ff73dc68da6d6fd6bc2ed7e8de5db774989f465d0587abba5d95d7b5d41647bb6a2235ba7a4f96acd34e3b8aec1d011d058f2fa2e0a85e31f7292d2804b26a0c66f2fd6b0a12094b98e08ae5dd4e749a749d2fac4aec955184d1ecca16906d8f59ee51e853e54cfe6b7c0f0b2fdbed44582bd658a9e5fe8eb579ed236cdb7c82c5fea97a4d83b04ed55aa44bc5130de1cdc87086c02ebaa605ed0c562fd5d84f661b71b07183f74d1933da9620195b617eccc0d243d897459760b96974051cf9ea1790caf1b56f2bc664076802b3a06d2e7ddfcc03562bb16e46dd0bda7d42eaec5f82dc5d26ab94c757288631f1ee86dde2024ebdd01e566134f55e49502fbaab1e37fae76161bc38ef168b48c15ec6397f7f21d1fdd245bc23fa9bc3cc1351c185dc584c2b507a6a8d48c2c9be57babfa5413e6394c27a9a2154f6552264009a1888b4e19224efc6a2b4de1698d1d4cc87f825062a9234bb1dc9dc3610d138d379ccddf2dde07da7e680057248d1a05ee910b21c5043f7e6bc10eff1a0b3a53e888038a6d662ce2be7468ec29c9de928b0bc410456ae1630d0487c184e517b8175dbf594a372159201d4f4de573520ce42781b403c91a91ccb95f6871dae9e47198b87eee7e83ea985208b45ff022ed45e5344f62932bedfad35005d861138e95636a5c375999e793adff5fd14f4f96b73fba1a9c792ad6b3ea39d23f988ea73fbf19b0d371be1278bb732619d13e16a07119962f9d739214e085e403c84e8454f8ff0b018bfb0f32ecf72051aeb443620dc6623da40bf95ea03db25488b22031c3885a0eb7f23374c4013b65e1c6789b6871335cf003be2951eadd2e5fdd15898f0c29265f15e6382f6a829fd8569d819c6d2559e883e038fac541bc9f43bc294938af1a2fd27461246fd0cf2cdb9246e3b70e1050859f7590f4b312c9904ec262bb6531d9236f6bbc625ba9cd8c608a12216d229f4f6e77edbeb853be68f1f102adbf09d3b0d252bd6b5d2746206ca1d72357ddd66ada886a89d66c271c81d8dd890c8a678181973f8fa136b77def159ed06d47e1baf7b8580ffdbc5646b14dd247d25a114bbd135c4c3b68f6af7b744de4573a47cb341d0f52b377e870e090ac2134ed2259dad28a61b01e099a356150b9356ebda2df7d02aa9ef5805c7a3c8fd298ccf7f0816ce7035cd13df5914055ae655bf31d0682c9a9973d608c785c1b17e74a77b491af910577f31ac2750c7bac2c064bbbd725e2eba643d5f56ffa47212fda618f2cb5c4266027374a3e103c3071fb41d8748ab089c1f610367c1ad231d0305e4df0cbc3715d41301558cd44b21e0f5525d54b0880c368bc5ac3fd57f14f4c2a7aced77744e3456ec35682fd2472c448511c9361bc8668619908f4a56190be0ab9284ef156b2a04bb9a78d9dedcf776bcb8f861e0014864d6f954cd4f71aa4693adb1507a6f5700f622bd8ce874b9c75a3177773c5be1652db21142ccbd2d6bd31638626c4b2a399d6b6c5c4fb84c8190f54ad2290391231973098ccacf08f08a4358d7c627bee441713baf7aa6f12f7cda46ba5ba43f560e535505a0681d7190596c2f6efc2697b772cea75b24685be0ac8723475093f419f176d0b87adb7025beec41c023d55f819577dc1aa5ed3e65aeeccf3777be8da587c0199963e29ee744d398beceea3bd89d1e58b068ec1341c7641b6a09fbc1e459ee7da6dd97e243b5e04b68b209cbf5adc606a7d4b37d00ab2c89cb90182892aeda0baac3ea296bcb24003318cb343f3e0ecabb372e144a92eb843a4697c30997c0a49031fa99bdb364be87aa9e213aef9a76e421abaf3d8b2c8d4bffab4d900542e868e901e4c47f6d4e2d0ec0436bf7df83784a9a94098bacd0ffd30d9c01baf934fd186eb499aa7943dc3c6f08f21adcf6939f4d249005c8e9c791ed234f564e601ca05815db4e100b8e0233aa5dc598334b140c9a24e23a515a967abd95b07d90baa9f68df98dc53d3e59413d97600672741f56a5ae1d8f06ebbf7beb27355e74f5a7756c467c7d5d04f49b9de6b99d1affff23246f4f716e322294e2f36e6ecfc73500675c6cc08462d93ba7f93521a9306742539fc6140f05ccff5912f5524819a57adc7fcc077eefde139cdc73b2ad02ca77f7b0b4763c9c4279ce9bf0eb21d7ce4d02e3475f12aa0e59a918966c0bd671274ce70263fcbace2663cd7ac5199bd8e4435c1af2a0db705687730835152f953d96f68db579169384e9e3fb4225ac743b36268e6ab23c29d7b9368a84c811f48f2b6d921c695514a145f246e82c784dd5d0d2415643592e92d3460ce336d4c667a24752c54c576f67615c7f0864e0787fefb05d44a69c74c01819021ccd58f72b8783446fee40df7c6ab090fcd1417d0fe0f906e5552eaa93cd5c62d4c91bf6c6e2368d26c8f1445aa9e14bcf3d831d60c38ddb6ed06a58ba4c55c205b9e42f90f103e38017e506cd45997015ea141be768028c07e422db2c70ee9ac17cee06d3d08b5c9b3ee6ae6bc9149c8d4c10f5696f4c845d250b868e526bba49ab8ab3d18eda5752b92c95d04e03071412e96e536b02d75dccbec48a2c1193717cee5f55e4fe88a4be40e3a8e9365d03efd909cea9622a8de881d1c7b427e2b60d6cda9875d912129508c3ecd140f72f14fa0c8e4cded240a403f345dc359ccddc5e13ed135c0ede9233046c32e888e55c2fe6ab2c21a4a0f24b27b2d3592c0270bf8b0c896b6d3e44799a00c1c3124719d5b7bbc531fc983c2aafd87e858d9780608ea19fe6c1f0bce71bcde3139ac2f169740ca2205698b4cb34eea86f797f0a518fb795a5c82cb976e516500cd352c063eabd8a8ec910ce61363464b5afe289f97ac185859182f393aeb643a64d0fc71453632a5cf8b99023823c5272b1b78d3b3419d8bebdf28f57906971b0ca8a00d09b1b3dfb9aebc582584dd98324a0547a3bc1f32116e65399ae1dad1163db8b12692bc5b0f5f7949c6470855ce8fa06ba51018f6dd8672a3b0ba063b503049dcba9dd7bbd2834bca3627d0577bd02f5962159754f32df0b623a570346fab659b53267492e4eafaa12998bef3b1dae04e15d8da1b9e71db785c01196ce9b51bef4eab13317d61f6a6e4153475c57da590e64d319574e65ed50dbf5dab56dba0fce466f73e14d0549eb89ff13e006d1a7b7c12653f4f592f02432964b1767ee6f72d17f67f2fa6eb93e370d3f622990abb78f7230deeeb7519ded90e505a2713406f95bca9c6ae6b19e376c02a68b062bbdeb35a9a783b1aae47e2c1d9e31ff3aaaabf797a42d9e6ce801eccf43b6847e30718c2f218ba2c0cc4fade749990ec4605193c47f38fb193eb61f0c47d2d0c991f639a7224c24ee32f82d9511ea350afc13c04e03bafd62a0b95e0c1dfebe9f51ad38a7d31fd1615283b0700c8bcffc63e98c6c4c9d0f8dc"}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:12 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) (async) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xc4, 0x0, &(0x7f0000000280)=[@exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x0, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/34, 0x22, 0x2, 0x11}, @fda={0x66646185, 0x3, 0x0, 0x23}}, &(0x7f0000000080)={0x0, 0x1c, 0x44}}}, @acquire={0x40046305, 0x2}, @acquire={0x40046305, 0x3}, @dead_binder_done, @increfs={0x40046304, 0x1}, @register_looper, @release, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x8, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x0, 0x3}, @fda={0x66646185, 0x9, 0x1, 0x17}}, &(0x7f0000000240)={0x0, 0x1c, 0x38}}, 0x40}], 0x1000, 0x0, &(0x7f0000000740)="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"}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r4) (async) 14:12:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="48e8fdffaa9f8e28324cefbffcc6f23469472fadcdfc62d5b0072120e2d8fb"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c60"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4014f50b, &(0x7f0000000040)={0x1, 0x5, 0x2}) 14:12:12 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x0], 0x0, 0x0) 14:12:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="48e8fdffaa9f8e28324cefbffcc6f23469472fadcdfc62d5b0072120e2d8fb"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="48e8fdffaa9f8e28324cefbffcc6f23469472fadcdfc62d5b0072120e2d8fb"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x402, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c60"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4014f50b, &(0x7f0000000040)={0x1, 0x5, 0x2}) 14:12:12 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="48e8fdffaa9f8e28324cefbffcc6f23469472fadcdfc62d5b0072120e2d8fb"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x402, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c60"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4014f50b, &(0x7f0000000040)={0x1, 0x5, 0x2}) 14:12:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r6) 14:12:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0xfc, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:13 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f00000003c0), 0x203c0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffed2, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000400)=[@register_looper, @register_looper, @free_buffer, @request_death={0x400c630e, 0x2}], 0x6f, 0x0, &(0x7f0000000640)="93be3321fc7e341754682ecf35e3708d8ab88278d2aad924dbf8392c336744e496802cc8f6cef27ef5c3631f27078d3302b9026e4962ad20a9f001e890c1f805d626a18c195ffa4bc5960194f2438ad3269df199fa6531ca141b5ba501115fe00368c8233b3a2e7e142108a8247d05"}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f00000002c0)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x8, 0x2, 0x30}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000001c0)={0x0, 0x1c, 0x34}}}, @register_looper, @decrefs, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000280)={0x0, 0x18, 0x34}}, 0x40}], 0x85, 0x0, &(0x7f0000000440)="a8fe9ffc610fd3e778ccfb720b49276734e99c3836b0ebb702e090d315e73ff821002224da4a93da4d3cd14e0c24c2edfb08d3965b86da25a7b39265d917d3dc8bb9f37b109dc290d999438689dd8e24f854b838c128ef88f95308f47db1a3136acd330544bbe91e3884f61d29d46d3cf69ade00f622d173172f9fb180c6cc319c798d83c5"}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:13 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$vcs(0xffffff9c, &(0x7f00000003c0), 0x203c0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffed2, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000400)=[@register_looper, @register_looper, @free_buffer, @request_death={0x400c630e, 0x2}], 0x6f, 0x0, &(0x7f0000000640)="93be3321fc7e341754682ecf35e3708d8ab88278d2aad924dbf8392c336744e496802cc8f6cef27ef5c3631f27078d3302b9026e4962ad20a9f001e890c1f805d626a18c195ffa4bc5960194f2438ad3269df199fa6531ca141b5ba501115fe00368c8233b3a2e7e142108a8247d05"}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f00000002c0)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x8, 0x2, 0x30}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000001c0)={0x0, 0x1c, 0x34}}}, @register_looper, @decrefs, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000280)={0x0, 0x18, 0x34}}, 0x40}], 0x85, 0x0, &(0x7f0000000440)="a8fe9ffc610fd3e778ccfb720b49276734e99c3836b0ebb702e090d315e73ff821002224da4a93da4d3cd14e0c24c2edfb08d3965b86da25a7b39265d917d3dc8bb9f37b109dc290d999438689dd8e24f854b838c128ef88f95308f47db1a3136acd330544bbe91e3884f61d29d46d3cf69ade00f622d173172f9fb180c6cc319c798d83c5"}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3414.303127][T12209] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 3414.434043][T12209] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:13 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f00000003c0), 0x203c0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0xfffffffffffffed2, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000400)=[@register_looper, @register_looper, @free_buffer, @request_death={0x400c630e, 0x2}], 0x6f, 0x0, &(0x7f0000000640)="93be3321fc7e341754682ecf35e3708d8ab88278d2aad924dbf8392c336744e496802cc8f6cef27ef5c3631f27078d3302b9026e4962ad20a9f001e890c1f805d626a18c195ffa4bc5960194f2438ad3269df199fa6531ca141b5ba501115fe00368c8233b3a2e7e142108a8247d05"}) (async) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) (async) r4 = socket$phonet(0x23, 0x2, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0xa4, 0x0, &(0x7f00000002c0)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x8, 0x2, 0x30}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000001c0)={0x0, 0x1c, 0x34}}}, @register_looper, @decrefs, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x2, 0x1e}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000280)={0x0, 0x18, 0x34}}, 0x40}], 0x85, 0x0, &(0x7f0000000440)="a8fe9ffc610fd3e778ccfb720b49276734e99c3836b0ebb702e090d315e73ff821002224da4a93da4d3cd14e0c24c2edfb08d3965b86da25a7b39265d917d3dc8bb9f37b109dc290d999438689dd8e24f854b838c128ef88f95308f47db1a3136acd330544bbe91e3884f61d29d46d3cf69ade00f622d173172f9fb180c6cc319c798d83c5"}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r4) (async) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r6) (async) 14:12:13 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2400}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:13 executing program 3: openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4], 0x0, 0x1000000000000, 0x0}) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)={0x7, {0x5, 0xb23, 0x2, 0x7}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x11b, 0x0, &(0x7f0000000280)="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"}) 14:12:13 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x0], 0x0, 0x0) [ 3414.711510][T12229] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:13 executing program 3: openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async, rerun: 64) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4], 0x0, 0x1000000000000, 0x0}) (async) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)={0x7, {0x5, 0xb23, 0x2, 0x7}}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x11b, 0x0, &(0x7f0000000280)="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"}) 14:12:13 executing program 3: openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$vimc1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r4], 0x0, 0x1000000000000, 0x0}) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000080)={0x7, {0x5, 0xb23, 0x2, 0x7}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x11b, 0x0, &(0x7f0000000280)="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"}) 14:12:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r4) (async) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r6) (async) 14:12:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c407681ccdbc02d5a1c348fc6f3d12b450a6b1ee663d468139c0307823d3c5bdc8158ddb8403a93a73ff5fe315600adcbc5f0501b6f3f3c92ba432be8654f723612075370b29cbca6d4172275b717dcacb3fad1732ab2c199ffbca82a1b5fa5148ee093630ef07bac19a4350eb925943620da5bc4bf50ab8ae70b92a31ac72c85223125efd6627f75e910c22b9f09000000200cf730d1bfaca2874d03a1b4117770f6f4"], 0xfffffffffffffe73, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c407681ccdbc02d5a1c348fc6f3d12b450a6b1ee663d468139c0307823d3c5bdc8158ddb8403a93a73ff5fe315600adcbc5f0501b6f3f3c92ba432be8654f723612075370b29cbca6d4172275b717dcacb3fad1732ab2c199ffbca82a1b5fa5148ee093630ef07bac19a4350eb925943620da5bc4bf50ab8ae70b92a31ac72c85223125efd6627f75e910c22b9f09000000200cf730d1bfaca2874d03a1b4117770f6f4"], 0xfffffffffffffe73, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (rerun: 64) 14:12:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c407681ccdbc02d5a1c348fc6f3d12b450a6b1ee663d468139c0307823d3c5bdc8158ddb8403a93a73ff5fe315600adcbc5f0501b6f3f3c92ba432be8654f723612075370b29cbca6d4172275b717dcacb3fad1732ab2c199ffbca82a1b5fa5148ee093630ef07bac19a4350eb925943620da5bc4bf50ab8ae70b92a31ac72c85223125efd6627f75e910c22b9f09000000200cf730d1bfaca2874d03a1b4117770f6f4"], 0xfffffffffffffe73, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) dup2(r0, r2) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x14080, 0x0) 14:12:14 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x300, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0xb0, 0x0, &(0x7f0000000140)="46199aa639ff808336ceb4a698ab8c1c81b7b0b76da3b3edc38be90c39ce2e878023d9e7ebc5d35befab6efaca3b7fb205d1551fc9031db5a302dba637396b2078d681f007cee14800000000009553a18ef3d4765f96163ed8efe4aeb5f3e57cb3fa5e2bbfefd54cb3efadca2793015138507eedec0446bc928df904d8351fcda779f2ec590c69ee6614f1b64ae911cda2e891b405d0642f2b0b8a7e6dd8af853a655c702f53dabdb56f8e1c805fc616"}) 14:12:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0xb0, 0x0, &(0x7f0000000140)="46199aa639ff808336ceb4a698ab8c1c81b7b0b76da3b3edc38be90c39ce2e878023d9e7ebc5d35befab6efaca3b7fb205d1551fc9031db5a302dba637396b2078d681f007cee14800000000009553a18ef3d4765f96163ed8efe4aeb5f3e57cb3fa5e2bbfefd54cb3efadca2793015138507eedec0446bc928df904d8351fcda779f2ec590c69ee6614f1b64ae911cda2e891b405d0642f2b0b8a7e6dd8af853a655c702f53dabdb56f8e1c805fc616"}) 14:12:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) dup2(r0, r2) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x14080, 0x0) [ 3415.826430][T12274] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:14 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x800, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0xb0, 0x0, &(0x7f0000000140)="46199aa639ff808336ceb4a698ab8c1c81b7b0b76da3b3edc38be90c39ce2e878023d9e7ebc5d35befab6efaca3b7fb205d1551fc9031db5a302dba637396b2078d681f007cee14800000000009553a18ef3d4765f96163ed8efe4aeb5f3e57cb3fa5e2bbfefd54cb3efadca2793015138507eedec0446bc928df904d8351fcda779f2ec590c69ee6614f1b64ae911cda2e891b405d0642f2b0b8a7e6dd8af853a655c702f53dabdb56f8e1c805fc616"}) 14:12:14 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x0], 0x0, 0x0) [ 3416.004981][T12274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x1}) dup2(r0, r2) (async) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x14080, 0x0) 14:12:15 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x41f8}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) 14:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) [ 3416.429024][T12294] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r4) (async) 14:12:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x81, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x3e, 0x5, "ca91042572"}, 0xd) 14:12:15 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x4ff, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r3, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r6}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0xd}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}, 0x400}], 0xc5, 0x0, &(0x7f0000000200)="2c9fda8441a8f3c93538050a1f519751b1b8c0d262fa8f46a40856df581ac2d0f16e8dc6224de9b4273f2f83458d6aec23abbb41b8ce7eeabae5ef7981e77eabea7048a04282992ce5e57c89a15bd6f77e1bcc8d241d2eb53304658c4cae3a4e302fb6c0a7b4b6d048d97ab8076a6eef4002b1ab62383a767f37f1f77cdaa2e7ad9173734255d6f88864710fdd8098369fb7b512fa454932b4a882cfe9aecd8ca9c3a07a8d484bad440f159535292e38e83fce94f9bdd28ab3316a9d64b4787dfb821b34ea"}) 14:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x81, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x3e, 0x5, "ca91042572"}, 0xd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r4) (async) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x81, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x3e, 0x5, "ca91042572"}, 0xd) (async) 14:12:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 32) dup3(r1, r0, 0x0) (async, rerun: 32) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) (async, rerun: 32) dup2(r3, r2) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) (async) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r6}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0xd}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}, 0x400}], 0xc5, 0x0, &(0x7f0000000200)="2c9fda8441a8f3c93538050a1f519751b1b8c0d262fa8f46a40856df581ac2d0f16e8dc6224de9b4273f2f83458d6aec23abbb41b8ce7eeabae5ef7981e77eabea7048a04282992ce5e57c89a15bd6f77e1bcc8d241d2eb53304658c4cae3a4e302fb6c0a7b4b6d048d97ab8076a6eef4002b1ab62383a767f37f1f77cdaa2e7ad9173734255d6f88864710fdd8098369fb7b512fa454932b4a882cfe9aecd8ca9c3a07a8d484bad440f159535292e38e83fce94f9bdd28ab3316a9d64b4787dfb821b34ea"}) [ 3417.262517][T12315] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) (async) dup2(r3, r2) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) (async) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x5c, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r6}, @enter_looper, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x2, 0xd}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}, 0x400}], 0xc5, 0x0, &(0x7f0000000200)="2c9fda8441a8f3c93538050a1f519751b1b8c0d262fa8f46a40856df581ac2d0f16e8dc6224de9b4273f2f83458d6aec23abbb41b8ce7eeabae5ef7981e77eabea7048a04282992ce5e57c89a15bd6f77e1bcc8d241d2eb53304658c4cae3a4e302fb6c0a7b4b6d048d97ab8076a6eef4002b1ab62383a767f37f1f77cdaa2e7ad9173734255d6f88864710fdd8098369fb7b512fa454932b4a882cfe9aecd8ca9c3a07a8d484bad440f159535292e38e83fce94f9bdd28ab3316a9d64b4787dfb821b34ea"}) 14:12:16 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0xf0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3417.593899][T12315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x2}, @decrefs], 0x1000, 0x0, &(0x7f0000000600)="5e587c00ea62503e072ab30b4b7825f3e582f2eaad95fc0974f308c07a5eb2c3b8745d2b1f0394efa532c5d7c0e4afc8ea334410601d38a890feac17bbe4cf6f7f5baa5ab9c39ea4376c438ec7129b98edd27518bc0d6995f555632971956ceb85fde2b60fec81095b5aa11a44650a263b3bfc609c2341e90c1597a24ed0d700b1e313f37aa5f58e6b6d1614e8f0c360a68eeb91aebd420a92614ac287098a748dae1a6bcec2cc0006cadfc788acebe648ee89a908d85eca9d0d3d64e26e5e662d5a0b619236c0eeea2b455f64d997ac5c7e5b54a986d006210bc2497b3b7538f90740a001e4b7f1b8b6472ba7b955015af8964d526e919c5ea57edc7ffff33d424b10f7c0952d52895c52e9a2e2e3a892ee52952c1211d1f852d26490ca4c5cbdf63cdaa15949de42984ca3512e4ef7e1796ab371ce45945771c65fadaa583a93d585b0fdb37afbaf1c4fa7b8215dae07f5119283dc7d246bf980ee8db27bbca06ec88947ed19081a0aecc8311c23f1047e4b4758694306c1b2961c676af5d394f3d03e39ffab15a1f415ae3c42d504d3945006c04d7adb2443da9001033c5890f4840b91f4f0594eba832fac22b0016beb9c50bcfed67edf3e32893b6e481bd93c6178f3a30f53b1ec9aea8fae8881b5f633085fe20c36f0e7cfb12df3831011cd61e91201a4bc1dd108449284eada4198929e0d0088dd208dff364e81eff1e623dc550396b19e0cbfa75ab5d20c171f6624be5851c8437c26c472ded199014e031ee1099b8b189f0e072407ec6f531a85c6fb78003ba9116defccb0f0647e59e55e39d75887566e552a03ef2c0e774f42423fab67352c1b88ff86b84710bc0684f6fbf4d31b844e1f04cb67b2a5613f9358751e44f68dfb22cb6726e4e0db6661a96a4bec59e839878956011632e007d803305c72a73c144d0cd1930bb154607def0aca5ef2b14767d1a1a39c9b292a050d4118fa89e5afb2e4f5c5190e36ff4da1ac3d3d0831d8805877ef45948457d69cfd9c358d1c68488fe9ba67ae3a64c8eaaeae547077a307fcb8a2f154299ffc5f0fa7550c371d6893904e1df977895c046161d9018ea8ff5587e33a6837e070cde42d62604fab4a248ac9133939722bc7b7f5183fb36ec285284b767ef57fa957c867d9a1ad24615782607c25685a5a26c8e030f1f3605899978605f2bf77ef32b0a769f4e5fbed31a903e26951c2603902d4d9babf896e72a2699cf0a3ab591a230e06a514d621839596b40e63577c6efacf6823392647c51c9575dcc154d0151b399081b15900e637015951c5b68c8901e3d76e575864f4c4f2f0bab94a711072e747825dabc8565f531f593b98f28e552e3202a4f09b7a1511e80b12b44b94fa158043c9e36f9dc0e1e51928772715d5fc484a2e107ef7cb2c906b81ceb4cfaafc282f95ba7d97fdbbde4ae41e2307f00497af5bf1a09740b2ff1f646326adc05f3758e0cddb8990f62b55427341e8c0883db6123b4634b3385295ee30a6332699014f309b3e74b31bce868fc3e1936ac90c96bf7e2ca6ea074a576600edf934c8680e12805f8fe71975f7d8e253453546580701a5a347e67c0ff989b7e61e92539d1d37e54de15074029d3ea6ca3a23be991e4422de458b82050729e81e77e6fa0a1234a61614750df9f435a6b309ec73c0e6ef068403d66310d0a108f8cb356919048adf58ebad0c02acc03e416c044602ccd17cb093bd12f88098cff068ad9925c0fdc6bb03a1f9f1c471745eb6dfe66f687d516dc69ed713c520017b577148a4845f7b1c4f8ad7dee5ccffbebf9909eeda77fc8c1f3b9a560875e92c6420ea8d7d5e0dd5955c59c0351eb105d3eafd67683061265278d58bb0ad18103f85f515591e5bca30ef1be68cf9b71a54e17b0a79f33797f716a570f8258b22f13abfd643b32712bcf40700c2e1c3044e5a0ec9f7b712d5e7722181add748af387298a7a7b34bc92d11fab5496bb47f9d13ab93508cf96b762cc7f2f81de8fd92a2fd604742a57a60a508a76d62840fe65717ecfd728d3fad9a7bffb86b25d963b05568a6e2dc372d06b8cd61930141fba00f24d88df852fa5449fca5571a58647b0aeb17a3f200452971215bd8143dea3715bc5ee6458cd89817d6b318418979ef706720c27d38a4c7f829d97bad8b7d3b49b6fbddc370e1417b9198303d0f30a6e18b4b863f53eb725af392a06878819252ed316dfa87eba64465d3ea6a46ffe86a41314ca0fee7335eeeb327d42de63ccd40446a9d52965d7f86675bae86c5500aab9f3471cf94b2f4ef5417499313f5d26f313554be536ff32664250871c5ad9166aac4929b65dd9e77c421193170c0af4fb9e3fa807d65638fa47a11e8a63715fac3ebcb6d1e92fb4e81bbfe7b675cae931fc56f4c6468f05f0e6e4f7d43afc025fe7ed11c27c60f73d79bbf6a0faa095d694c85241eaa16b257197a20d44f3d2d5cbedbd9a36e57e73b4c22547c231529303981388bc72f794a44f78c24e54127f104fd5902e5920b0b59cc4b76edb056572646800e08d7c8cae17478c0e7544d40da35ae1eee442752d671aa1477a9ae5dc836d310fe6bda8b6191d0261ab713eaf829fd29e59808d647482026e658d3be82ba669dbe47230fb5a32c9f2ee0519fbf87ecdd6d3b645367196d20ce3fe5239cc0900a2e09fd643e43adb3fd834fcd3e0be91aac302945162adb5bc215fa970beae5143b684e24dc3159b666d6096d14ad2b6f984bf0895b9466c921418feefa82c284c302f4740dddefb62732f14746d82c406b68b241d2739dd75178b7dc1053b88e4948bd4b204af7dda751b111b415b23518605f1d0b9818347fe28db9562951066a604f042449b4f679835c6cd6b3e2de936f9ddbce53dde33bd13f9a7f44aaf37ee44b7731322ffccc555639345e7487c6d6395ccc236f19d00b2dda392d2f0368ebea7f6c2ed6251f62c05150c97cfd821fc7b3a09f7c073cd715fa2f85019640bb4b2118d1c210974d78963cbb5f2d95e7209fbc402067e9e4db2f6330692d58ffd39490774a13025a8a6b63efac0264229c9dccb7c54006eab5bcc8c5f6905f120313af5d2ac4c6044646370ad118722a1c75f80a179583a61a740b674388ee1fb34b37e25ab7d4cde0c35fc9167579b2570cbda0f1e4889663279b052b9b3492ccd84943384b69b7227b6eacb9962cc00cde6451bbb88cf60a940b34931899a704d92ff43e4f497aa57884c447e302b8e10a02a0b111a50ca322dc22184acff37d0b2b4b978ca360cfbd6b9b6b7103f1bce6369c41d90529bfa3be587c1f9d782d52d6ecf7bf57fd67ebb613d09d5b4f2636a1c1abfa3a4892f9d38854442cfc690caa2cc3614964c91af78988e7284cc7a5ed6448afc0eea59edcbdc967055eb20214350108bc3625b664124f58718051aa063a8bc1bcb0b753a23700aa6e3fadfe2f9cdddff719d5ade5c5efdc2868e84b5bd083101c9ac2c9009ea890609639d11925aa4575d546dafcf744b1c353721b65a40228f6b9f17d84efd3457f761795506a54ee67d764a1328420d8cc5dd7e303259ffb60634f2e6653c1f5fe7be4e80fbe07218f96641f4137a42b6489305f6e96be6090d8689ffb47480be5f72ceee8f256d9439653e9fa086283b381354f7ec922e8055b3de011242ab5b9c03ddc312e79e92bb63b73b9718e947ffd9639eaee2077a1e5b6be15071a3afdaa544b8056b7247d96b568adb567e8b3c9d837608810fe3388fe485fa17d06cb73c3f9d81d6014051727d9fd5144903e3eba7e25844ed113ea115ee39315b8435c00bdd9dd60ab247c02071d1e3483ca36f34e9daba41ab70d130533e75b2f98738a011c1de01a5e9430fe845fcb3d788136f6123a8c932a5004aa0b65259db097e80292b0b805828125546d31f238671b14e34d15ab5bd91c942c6729147feacf7086402de965ffa7a98639386c341f1af1ddf327538bc8aa0a6f8685bf924a17d56841c84d922d719bc86912bcc1be3d03e98fdad7df6fa7beeeef26a49715805a7f93b7158ba028d6ac8ccaba5775c59fa22dece706e0364b47a84c89273c83d6c62d293e6af1465d3b825ceb1df3dfb557eb32675c3120b9918ac50036dc31d50383f715b45f024569e4cb1280f88859fa951af7663ec4bae5327970e1086b90916b1c43a6cf7bd5c772b33170086a92a17f84d79bf4b776d5907262617f33429d7a600ded7e80280a8ebbce847b5f18776565cda00804330dbb4dc7d09c2a834b2b134249ca4f0669bc5abd971d0241ef3d1e7275b53ad5c78b6ddc6178151a44802af5a374afca7af257053de7d31acc56c43e0500c170aa24e1c9cdca59ec0a039e6cc8610e840667cb3783e6bc333b0d44f1434c1fee20b73c573b38d5d25354e4c83fb6d449f0730ffe70f4ed635da432b275efef563d004dc0b8d25aaeae60350d769d45558c7e4c77edb16ce2455ceb89ce425ae65982cb68d1141fce9e49410babf3850ab39aed49b3b8118154cda5df1a0f9ce2578d0f80cc4135648a290f03221d79387356c00defde9fa47b7f8b93e48b8639eacf8ced2f1b5cb512f836a85432a91f248bf85a162b576ba2258a5f40767dc987ac0bc19af73f58f095c679d2b730dd305f00dd050e56a9a8cf7ae55633dcaee9fcd21200f31dc01acc9ec996f2b841f2e6c0f1a6976b63b7ef2445acb188b4fd614e869eb172d437e936df9c9a31c0f40af01f414e014ffe448f32971965b9906c8c68e81acfbfc5ebc54974c571735c51aa75bf574cb91f69003fa25c4b00b119888ee9406573a38b8d98b11d98768f766d81dfd3c338a2d5b3c1d521a8b5dc123ddfc10586d4240eaa7db740de224f6b3f8c260e18095e7820207b53b174f9da3e845f331290140ce2317f42e6496f214867f591e0d792771015e45868c0e1bfe0e84973b565d1a4bdf5852be9c1bc47baaae00fd0b3a0446093d975eb3aaaea8c2e3647005bee993b3ebf43bce6ae52bf8cba225039ee0a8c2cb89772150fa9cfe1e6719fe714c51320b5d109a3219d2e421a6b85bf3f9ea339bd4d698dd264482170dada08de18fd12c42dd99343b930d202fdc9e93a9cb6d7e8a0ce3e7c41d2c1bb6bd14c7b1287d8fce71fce75ea2a2386ea5cbefde35d3affae9a38ffc92d0bedd57190394a5ea3b35126c5f2081fc576bc5a31ca68c99398738d439a703f3a4c39bfce3b40427b22e4a5af1ca849c0c67e38c2e16900eec9d62ffeda8cc37bc5fbe06c5e424160d74f9da2e708d9af794c97703546be58206f992349bce2003a50408f38c88487b229aef53f2d36cd99b656fbc2bd2e8c38df11424487b08bbf00de6ffde2500b875e809fd5983340e648c855299479554e5c261374bdd28bceef87db62fd0eaf4931cfe56cd0b7bfc086151a679f59f8ac3b0bf473ae8a5d5e772098b87647f86b666d8d19cabe5f4cc8457c2e68783d8841f761404f7acac94156ba7f0015898f187efe9d7c1fd8d012147a1cf6f8dd0cd89609cb47fd2b16a4ab778b9bacf42db7f08c1ebfbad4a3583929805e8f0a543c062427408fbd76e891911b0147662ec934814e8b8f80884e89be13cb72da94879d351ba81132db953efeada7b274b33b4a8b50840182d312b500d55e81e3bc224f4ebc6f97c2efdec03bfbc3de7075b9e5289ab63ec1d4fe88e264eb895aa85bde8a077c0df8d2208b7a096c3be5cc160260ad8414d699d80a3ce71e02cb5f39d27979131c9374f9d9dd610bc6f99834a59535bc25c81dafc71a5273"}) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) dup3(r1, r1, 0x80000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a630c407e8990cead6d000000f449d12e0a057947c53003d040eb608fb42513"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) 14:12:16 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x2}, @decrefs], 0x1000, 0x0, &(0x7f0000000600)="5e587c00ea62503e072ab30b4b7825f3e582f2eaad95fc0974f308c07a5eb2c3b8745d2b1f0394efa532c5d7c0e4afc8ea334410601d38a890feac17bbe4cf6f7f5baa5ab9c39ea4376c438ec7129b98edd27518bc0d6995f555632971956ceb85fde2b60fec81095b5aa11a44650a263b3bfc609c2341e90c1597a24ed0d700b1e313f37aa5f58e6b6d1614e8f0c360a68eeb91aebd420a92614ac287098a748dae1a6bcec2cc0006cadfc788acebe648ee89a908d85eca9d0d3d64e26e5e662d5a0b619236c0eeea2b455f64d997ac5c7e5b54a986d006210bc2497b3b7538f90740a001e4b7f1b8b6472ba7b955015af8964d526e919c5ea57edc7ffff33d424b10f7c0952d52895c52e9a2e2e3a892ee52952c1211d1f852d26490ca4c5cbdf63cdaa15949de42984ca3512e4ef7e1796ab371ce45945771c65fadaa583a93d585b0fdb37afbaf1c4fa7b8215dae07f5119283dc7d246bf980ee8db27bbca06ec88947ed19081a0aecc8311c23f1047e4b4758694306c1b2961c676af5d394f3d03e39ffab15a1f415ae3c42d504d3945006c04d7adb2443da9001033c5890f4840b91f4f0594eba832fac22b0016beb9c50bcfed67edf3e32893b6e481bd93c6178f3a30f53b1ec9aea8fae8881b5f633085fe20c36f0e7cfb12df3831011cd61e91201a4bc1dd108449284eada4198929e0d0088dd208dff364e81eff1e623dc550396b19e0cbfa75ab5d20c171f6624be5851c8437c26c472ded199014e031ee1099b8b189f0e072407ec6f531a85c6fb78003ba9116defccb0f0647e59e55e39d75887566e552a03ef2c0e774f42423fab67352c1b88ff86b84710bc0684f6fbf4d31b844e1f04cb67b2a5613f9358751e44f68dfb22cb6726e4e0db6661a96a4bec59e839878956011632e007d803305c72a73c144d0cd1930bb154607def0aca5ef2b14767d1a1a39c9b292a050d4118fa89e5afb2e4f5c5190e36ff4da1ac3d3d0831d8805877ef45948457d69cfd9c358d1c68488fe9ba67ae3a64c8eaaeae547077a307fcb8a2f154299ffc5f0fa7550c371d6893904e1df977895c046161d9018ea8ff5587e33a6837e070cde42d62604fab4a248ac9133939722bc7b7f5183fb36ec285284b767ef57fa957c867d9a1ad24615782607c25685a5a26c8e030f1f3605899978605f2bf77ef32b0a769f4e5fbed31a903e26951c2603902d4d9babf896e72a2699cf0a3ab591a230e06a514d621839596b40e63577c6efacf6823392647c51c9575dcc154d0151b399081b15900e637015951c5b68c8901e3d76e575864f4c4f2f0bab94a711072e747825dabc8565f531f593b98f28e552e3202a4f09b7a1511e80b12b44b94fa158043c9e36f9dc0e1e51928772715d5fc484a2e107ef7cb2c906b81ceb4cfaafc282f95ba7d97fdbbde4ae41e2307f00497af5bf1a09740b2ff1f646326adc05f3758e0cddb8990f62b55427341e8c0883db6123b4634b3385295ee30a6332699014f309b3e74b31bce868fc3e1936ac90c96bf7e2ca6ea074a576600edf934c8680e12805f8fe71975f7d8e253453546580701a5a347e67c0ff989b7e61e92539d1d37e54de15074029d3ea6ca3a23be991e4422de458b82050729e81e77e6fa0a1234a61614750df9f435a6b309ec73c0e6ef068403d66310d0a108f8cb356919048adf58ebad0c02acc03e416c044602ccd17cb093bd12f88098cff068ad9925c0fdc6bb03a1f9f1c471745eb6dfe66f687d516dc69ed713c520017b577148a4845f7b1c4f8ad7dee5ccffbebf9909eeda77fc8c1f3b9a560875e92c6420ea8d7d5e0dd5955c59c0351eb105d3eafd67683061265278d58bb0ad18103f85f515591e5bca30ef1be68cf9b71a54e17b0a79f33797f716a570f8258b22f13abfd643b32712bcf40700c2e1c3044e5a0ec9f7b712d5e7722181add748af387298a7a7b34bc92d11fab5496bb47f9d13ab93508cf96b762cc7f2f81de8fd92a2fd604742a57a60a508a76d62840fe65717ecfd728d3fad9a7bffb86b25d963b05568a6e2dc372d06b8cd61930141fba00f24d88df852fa5449fca5571a58647b0aeb17a3f200452971215bd8143dea3715bc5ee6458cd89817d6b318418979ef706720c27d38a4c7f829d97bad8b7d3b49b6fbddc370e1417b9198303d0f30a6e18b4b863f53eb725af392a06878819252ed316dfa87eba64465d3ea6a46ffe86a41314ca0fee7335eeeb327d42de63ccd40446a9d52965d7f86675bae86c5500aab9f3471cf94b2f4ef5417499313f5d26f313554be536ff32664250871c5ad9166aac4929b65dd9e77c421193170c0af4fb9e3fa807d65638fa47a11e8a63715fac3ebcb6d1e92fb4e81bbfe7b675cae931fc56f4c6468f05f0e6e4f7d43afc025fe7ed11c27c60f73d79bbf6a0faa095d694c85241eaa16b257197a20d44f3d2d5cbedbd9a36e57e73b4c22547c231529303981388bc72f794a44f78c24e54127f104fd5902e5920b0b59cc4b76edb056572646800e08d7c8cae17478c0e7544d40da35ae1eee442752d671aa1477a9ae5dc836d310fe6bda8b6191d0261ab713eaf829fd29e59808d647482026e658d3be82ba669dbe47230fb5a32c9f2ee0519fbf87ecdd6d3b645367196d20ce3fe5239cc0900a2e09fd643e43adb3fd834fcd3e0be91aac302945162adb5bc215fa970beae5143b684e24dc3159b666d6096d14ad2b6f984bf0895b9466c921418feefa82c284c302f4740dddefb62732f14746d82c406b68b241d2739dd75178b7dc1053b88e4948bd4b204af7dda751b111b415b23518605f1d0b9818347fe28db9562951066a604f042449b4f679835c6cd6b3e2de936f9ddbce53dde33bd13f9a7f44aaf37ee44b7731322ffccc555639345e7487c6d6395ccc236f19d00b2dda392d2f0368ebea7f6c2ed6251f62c05150c97cfd821fc7b3a09f7c073cd715fa2f85019640bb4b2118d1c210974d78963cbb5f2d95e7209fbc402067e9e4db2f6330692d58ffd39490774a13025a8a6b63efac0264229c9dccb7c54006eab5bcc8c5f6905f120313af5d2ac4c6044646370ad118722a1c75f80a179583a61a740b674388ee1fb34b37e25ab7d4cde0c35fc9167579b2570cbda0f1e4889663279b052b9b3492ccd84943384b69b7227b6eacb9962cc00cde6451bbb88cf60a940b34931899a704d92ff43e4f497aa57884c447e302b8e10a02a0b111a50ca322dc22184acff37d0b2b4b978ca360cfbd6b9b6b7103f1bce6369c41d90529bfa3be587c1f9d782d52d6ecf7bf57fd67ebb613d09d5b4f2636a1c1abfa3a4892f9d38854442cfc690caa2cc3614964c91af78988e7284cc7a5ed6448afc0eea59edcbdc967055eb20214350108bc3625b664124f58718051aa063a8bc1bcb0b753a23700aa6e3fadfe2f9cdddff719d5ade5c5efdc2868e84b5bd083101c9ac2c9009ea890609639d11925aa4575d546dafcf744b1c353721b65a40228f6b9f17d84efd3457f761795506a54ee67d764a1328420d8cc5dd7e303259ffb60634f2e6653c1f5fe7be4e80fbe07218f96641f4137a42b6489305f6e96be6090d8689ffb47480be5f72ceee8f256d9439653e9fa086283b381354f7ec922e8055b3de011242ab5b9c03ddc312e79e92bb63b73b9718e947ffd9639eaee2077a1e5b6be15071a3afdaa544b8056b7247d96b568adb567e8b3c9d837608810fe3388fe485fa17d06cb73c3f9d81d6014051727d9fd5144903e3eba7e25844ed113ea115ee39315b8435c00bdd9dd60ab247c02071d1e3483ca36f34e9daba41ab70d130533e75b2f98738a011c1de01a5e9430fe845fcb3d788136f6123a8c932a5004aa0b65259db097e80292b0b805828125546d31f238671b14e34d15ab5bd91c942c6729147feacf7086402de965ffa7a98639386c341f1af1ddf327538bc8aa0a6f8685bf924a17d56841c84d922d719bc86912bcc1be3d03e98fdad7df6fa7beeeef26a49715805a7f93b7158ba028d6ac8ccaba5775c59fa22dece706e0364b47a84c89273c83d6c62d293e6af1465d3b825ceb1df3dfb557eb32675c3120b9918ac50036dc31d50383f715b45f024569e4cb1280f88859fa951af7663ec4bae5327970e1086b90916b1c43a6cf7bd5c772b33170086a92a17f84d79bf4b776d5907262617f33429d7a600ded7e80280a8ebbce847b5f18776565cda00804330dbb4dc7d09c2a834b2b134249ca4f0669bc5abd971d0241ef3d1e7275b53ad5c78b6ddc6178151a44802af5a374afca7af257053de7d31acc56c43e0500c170aa24e1c9cdca59ec0a039e6cc8610e840667cb3783e6bc333b0d44f1434c1fee20b73c573b38d5d25354e4c83fb6d449f0730ffe70f4ed635da432b275efef563d004dc0b8d25aaeae60350d769d45558c7e4c77edb16ce2455ceb89ce425ae65982cb68d1141fce9e49410babf3850ab39aed49b3b8118154cda5df1a0f9ce2578d0f80cc4135648a290f03221d79387356c00defde9fa47b7f8b93e48b8639eacf8ced2f1b5cb512f836a85432a91f248bf85a162b576ba2258a5f40767dc987ac0bc19af73f58f095c679d2b730dd305f00dd050e56a9a8cf7ae55633dcaee9fcd21200f31dc01acc9ec996f2b841f2e6c0f1a6976b63b7ef2445acb188b4fd614e869eb172d437e936df9c9a31c0f40af01f414e014ffe448f32971965b9906c8c68e81acfbfc5ebc54974c571735c51aa75bf574cb91f69003fa25c4b00b119888ee9406573a38b8d98b11d98768f766d81dfd3c338a2d5b3c1d521a8b5dc123ddfc10586d4240eaa7db740de224f6b3f8c260e18095e7820207b53b174f9da3e845f331290140ce2317f42e6496f214867f591e0d792771015e45868c0e1bfe0e84973b565d1a4bdf5852be9c1bc47baaae00fd0b3a0446093d975eb3aaaea8c2e3647005bee993b3ebf43bce6ae52bf8cba225039ee0a8c2cb89772150fa9cfe1e6719fe714c51320b5d109a3219d2e421a6b85bf3f9ea339bd4d698dd264482170dada08de18fd12c42dd99343b930d202fdc9e93a9cb6d7e8a0ce3e7c41d2c1bb6bd14c7b1287d8fce71fce75ea2a2386ea5cbefde35d3affae9a38ffc92d0bedd57190394a5ea3b35126c5f2081fc576bc5a31ca68c99398738d439a703f3a4c39bfce3b40427b22e4a5af1ca849c0c67e38c2e16900eec9d62ffeda8cc37bc5fbe06c5e424160d74f9da2e708d9af794c97703546be58206f992349bce2003a50408f38c88487b229aef53f2d36cd99b656fbc2bd2e8c38df11424487b08bbf00de6ffde2500b875e809fd5983340e648c855299479554e5c261374bdd28bceef87db62fd0eaf4931cfe56cd0b7bfc086151a679f59f8ac3b0bf473ae8a5d5e772098b87647f86b666d8d19cabe5f4cc8457c2e68783d8841f761404f7acac94156ba7f0015898f187efe9d7c1fd8d012147a1cf6f8dd0cd89609cb47fd2b16a4ab778b9bacf42db7f08c1ebfbad4a3583929805e8f0a543c062427408fbd76e891911b0147662ec934814e8b8f80884e89be13cb72da94879d351ba81132db953efeada7b274b33b4a8b50840182d312b500d55e81e3bc224f4ebc6f97c2efdec03bfbc3de7075b9e5289ab63ec1d4fe88e264eb895aa85bde8a077c0df8d2208b7a096c3be5cc160260ad8414d699d80a3ce71e02cb5f39d27979131c9374f9d9dd610bc6f99834a59535bc25c81dafc71a5273"}) (rerun: 32) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) dup3(r1, r1, 0x80000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a630c407e8990cead6d000000f449d12e0a057947c53003d040eb608fb42513"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3417.818793][T12337] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 14:12:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = dup2(r0, r2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x8, 0x81, 0x5, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x3e, 0x5, "ca91042572"}, 0xd) 14:12:16 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4800}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3418.060829][T12337] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:17 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x2}, @decrefs], 0x1000, 0x0, &(0x7f0000000600)="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"}) (async) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) dup3(r1, r1, 0x80000) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a630c407e8990cead6d000000f449d12e0a057947c53003d040eb608fb42513"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (rerun: 64) 14:12:17 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000005c0)={0x6, r0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendfile(0xffffffffffffffff, r3, &(0x7f00000006c0)=0x10001, 0x2) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10243, 0x60) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc04c5609, &(0x7f0000000440)={0xffffffff, 0xb, 0x4, 0x4000, 0x6, {}, {0x3, 0xc, 0x5, 0x0, 0x7, 0x20, "3e176ff8"}, 0x9, 0x4, {}, 0x3, 0x0, r4}) connect$inet(r4, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10) fdatasync(r5) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, 0xf, 0x7, 0x201, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0x1}, [@generic="2cfcc0df08f65be9bead2361f30b208237a1bad42ed950d192f2f7fa11e6f7abc75edebd741a2fc75805d9b8204249d0887190f9687cf74eaceea00f163d0b0a0ee74dc88456293ccfe0690d74469e21f1e2865aecadabdb1a047c145d53cf661f888f38c1605b540587a518252277f104f43c66dfa0776780bae0033b826162044efb6066bdb4c4b1208fa6a3a451773f52fd4c3077e0c800a5424a754d5034b06ec80c723d6d59723233fc6e2b61c1e2b6b51eff41c9dff20ba9dfa95cefe4e8def819afcf297a9b4e1d0b231736ddf5bca8c13129182c04eca2f923320d04d12092"]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400ac50) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = dup(r7) sendto$inet(r2, &(0x7f0000000700)="3c63ecefd82739111fe9408bb18545759a7adeebc20bebce258d0a7b8aaca46eceed555294c005211ac1dc31347c309e931ad959957d02d839731e1490600b876271693363d5a63ea2676ec5d1ac5ace1f25fdefd3b08718fc830be80e7e2059cce943ff18347628", 0x68, 0x804, &(0x7f0000000780)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000640)={0x7ff, 0xa, 0x4, 0x100000, 0x8000, {0x77359400}, {0x2, 0x2, 0x81, 0x5, 0x2, 0x9, "ff34648a"}, 0x9, 0x4, {}, 0xbc9, 0x0, r5}) sendmsg$nl_generic(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x219806c8fa4d5aa8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x14, 0x2, 0x70bd2c, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x29e37bf90a657d36}, 0x44) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1406, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20000050) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r1, r10) ioctl(r4, 0x2, &(0x7f0000000280)="a45e9468ce291676be9d89be06211aa7c0c0927251234e4d30cff3e6426f632c4e0b851ff99b83beebd34df6faf3fc393506ed3ee26f4e44316523a2e9d8d9fcea1a6b338d3bc960489b973506ae69a6c816538281993f215d90055a18fb577da9b6e770bad5804fedc9924b7dbfb3c15028af31c5917d387e68efe0c67758a81f4142417d2bb77752be09337ef59c4b7a085e754c6d359b707ae2ded4dd378348fc") [ 3418.213112][T12354] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:17 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f3620000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x104, 0x0, &(0x7f00000007c0)=[@clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x1, 0x1f}, @flat=@handle, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/229, 0xe5, 0x2, 0x10}}, &(0x7f0000000440)={0x0, 0x1c, 0x34}}, 0x400}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/7, 0x7, 0x2, 0x23}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/2, 0x2, 0x0, 0x11}, @flat=@weak_binder={0x77622a85, 0x2101, 0x2}, @fda={0x66646185, 0x1, 0x2, 0x26}}, &(0x7f00000006c0)={0x0, 0x28, 0x40}}, 0x40}], 0xa8, 0x0, &(0x7f0000000900)="736159dee27e5500010fb430a79ff0403db4c38905edf76001d22db449a388a65e852ac5b3e0b6c31123584a07a9e3b473554e56c8792d10e42a110145eb5b2b10b4b87e9869ed18d6066e5a8774c19fec15190e24bfb4ac64fedbe6d2cf5ba409ee535662a7949ef252bd1edd3ca8b1256f64ad2b7902cc3af1e6cd300c67d012aa201d25688a8a7d299f42d2e35208fe369e42233aa898224e4da239a6906c2fe82b46e7a60d18"}) r6 = dup(r3) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={r7, 0xcc, "a1f17644fac4153d23c006bb4a76d4ee67eb852b20b2a16f4ad59175e9001be007620eff7fd07dd640de9dda02c212cc853105a20ec295b22567db15129285dcb2e8ab4129ef4203bf53a3184f53346f2671aa7f1a36ec310b3a451f92a6312631538872013ace063daabd25c24c9d8943a9a19e118b981d3349a32b6d2fe59d6b24b01bc4d55deff2f62291d799320a77ce1eaa48b0f48ec3b12bfa3ade3cd59f306c55292f2d0d418035ff9057c2839c694f6a50674295243187ac80f4690ffec8d8d7514e1c50745289dc"}, &(0x7f0000000240)=0xd4) 14:12:17 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async, rerun: 32) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f3620000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x104, 0x0, &(0x7f00000007c0)=[@clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x1, 0x1f}, @flat=@handle, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/229, 0xe5, 0x2, 0x10}}, &(0x7f0000000440)={0x0, 0x1c, 0x34}}, 0x400}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/7, 0x7, 0x2, 0x23}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/2, 0x2, 0x0, 0x11}, @flat=@weak_binder={0x77622a85, 0x2101, 0x2}, @fda={0x66646185, 0x1, 0x2, 0x26}}, &(0x7f00000006c0)={0x0, 0x28, 0x40}}, 0x40}], 0xa8, 0x0, &(0x7f0000000900)="736159dee27e5500010fb430a79ff0403db4c38905edf76001d22db449a388a65e852ac5b3e0b6c31123584a07a9e3b473554e56c8792d10e42a110145eb5b2b10b4b87e9869ed18d6066e5a8774c19fec15190e24bfb4ac64fedbe6d2cf5ba409ee535662a7949ef252bd1edd3ca8b1256f64ad2b7902cc3af1e6cd300c67d012aa201d25688a8a7d299f42d2e35208fe369e42233aa898224e4da239a6906c2fe82b46e7a60d18"}) (async) r6 = dup(r3) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x30}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={r7, 0xcc, "a1f17644fac4153d23c006bb4a76d4ee67eb852b20b2a16f4ad59175e9001be007620eff7fd07dd640de9dda02c212cc853105a20ec295b22567db15129285dcb2e8ab4129ef4203bf53a3184f53346f2671aa7f1a36ec310b3a451f92a6312631538872013ace063daabd25c24c9d8943a9a19e118b981d3349a32b6d2fe59d6b24b01bc4d55deff2f62291d799320a77ce1eaa48b0f48ec3b12bfa3ade3cd59f306c55292f2d0d418035ff9057c2839c694f6a50674295243187ac80f4690ffec8d8d7514e1c50745289dc"}, &(0x7f0000000240)=0xd4) 14:12:17 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = dup3(r1, r0, 0x0) (async, rerun: 32) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="f3620000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000009c0)={0x104, 0x0, &(0x7f00000007c0)=[@clear_death={0x400c630f, 0x1}, @clear_death={0x400c630f, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x6, 0x1, 0x1f}, @flat=@handle, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/229, 0xe5, 0x2, 0x10}}, &(0x7f0000000440)={0x0, 0x1c, 0x34}}, 0x400}, @increfs={0x40046304, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/7, 0x7, 0x2, 0x23}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/2, 0x2, 0x0, 0x11}, @flat=@weak_binder={0x77622a85, 0x2101, 0x2}, @fda={0x66646185, 0x1, 0x2, 0x26}}, &(0x7f00000006c0)={0x0, 0x28, 0x40}}, 0x40}], 0xa8, 0x0, &(0x7f0000000900)="736159dee27e5500010fb430a79ff0403db4c38905edf76001d22db449a388a65e852ac5b3e0b6c31123584a07a9e3b473554e56c8792d10e42a110145eb5b2b10b4b87e9869ed18d6066e5a8774c19fec15190e24bfb4ac64fedbe6d2cf5ba409ee535662a7949ef252bd1edd3ca8b1256f64ad2b7902cc3af1e6cd300c67d012aa201d25688a8a7d299f42d2e35208fe369e42233aa898224e4da239a6906c2fe82b46e7a60d18"}) r6 = dup(r3) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 64) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3, 0x30}, &(0x7f0000000080)=0xc) (rerun: 64) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000140)={r7, 0xcc, "a1f17644fac4153d23c006bb4a76d4ee67eb852b20b2a16f4ad59175e9001be007620eff7fd07dd640de9dda02c212cc853105a20ec295b22567db15129285dcb2e8ab4129ef4203bf53a3184f53346f2671aa7f1a36ec310b3a451f92a6312631538872013ace063daabd25c24c9d8943a9a19e118b981d3349a32b6d2fe59d6b24b01bc4d55deff2f62291d799320a77ce1eaa48b0f48ec3b12bfa3ade3cd59f306c55292f2d0d418035ff9057c2839c694f6a50674295243187ac80f4690ffec8d8d7514e1c50745289dc"}, &(0x7f0000000240)=0xd4) 14:12:17 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x500, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:17 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:17 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) (async) dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000005c0)={0x6, r0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendfile(0xffffffffffffffff, r3, &(0x7f00000006c0)=0x10001, 0x2) (async) sendfile(0xffffffffffffffff, r3, &(0x7f00000006c0)=0x10001, 0x2) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10243, 0x60) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc04c5609, &(0x7f0000000440)={0xffffffff, 0xb, 0x4, 0x4000, 0x6, {}, {0x3, 0xc, 0x5, 0x0, 0x7, 0x20, "3e176ff8"}, 0x9, 0x4, {}, 0x3, 0x0, r4}) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc04c5609, &(0x7f0000000440)={0xffffffff, 0xb, 0x4, 0x4000, 0x6, {}, {0x3, 0xc, 0x5, 0x0, 0x7, 0x20, "3e176ff8"}, 0x9, 0x4, {}, 0x3, 0x0, r4}) connect$inet(r4, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10) fdatasync(r5) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, 0xf, 0x7, 0x201, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0x1}, [@generic="2cfcc0df08f65be9bead2361f30b208237a1bad42ed950d192f2f7fa11e6f7abc75edebd741a2fc75805d9b8204249d0887190f9687cf74eaceea00f163d0b0a0ee74dc88456293ccfe0690d74469e21f1e2865aecadabdb1a047c145d53cf661f888f38c1605b540587a518252277f104f43c66dfa0776780bae0033b826162044efb6066bdb4c4b1208fa6a3a451773f52fd4c3077e0c800a5424a754d5034b06ec80c723d6d59723233fc6e2b61c1e2b6b51eff41c9dff20ba9dfa95cefe4e8def819afcf297a9b4e1d0b231736ddf5bca8c13129182c04eca2f923320d04d12092"]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400ac50) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = dup(r7) sendto$inet(r2, &(0x7f0000000700)="3c63ecefd82739111fe9408bb18545759a7adeebc20bebce258d0a7b8aaca46eceed555294c005211ac1dc31347c309e931ad959957d02d839731e1490600b876271693363d5a63ea2676ec5d1ac5ace1f25fdefd3b08718fc830be80e7e2059cce943ff18347628", 0x68, 0x804, &(0x7f0000000780)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000640)={0x7ff, 0xa, 0x4, 0x100000, 0x8000, {0x77359400}, {0x2, 0x2, 0x81, 0x5, 0x2, 0x9, "ff34648a"}, 0x9, 0x4, {}, 0xbc9, 0x0, r5}) sendmsg$nl_generic(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x219806c8fa4d5aa8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x14, 0x2, 0x70bd2c, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x29e37bf90a657d36}, 0x44) (async) sendmsg$nl_generic(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x219806c8fa4d5aa8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x14, 0x2, 0x70bd2c, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x29e37bf90a657d36}, 0x44) socket$nl_rdma(0x10, 0x3, 0x14) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1406, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20000050) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r1, r10) ioctl(r4, 0x2, &(0x7f0000000280)="a45e9468ce291676be9d89be06211aa7c0c0927251234e4d30cff3e6426f632c4e0b851ff99b83beebd34df6faf3fc393506ed3ee26f4e44316523a2e9d8d9fcea1a6b338d3bc960489b973506ae69a6c816538281993f215d90055a18fb577da9b6e770bad5804fedc9924b7dbfb3c15028af31c5917d387e68efe0c67758a81f4142417d2bb77752be09337ef59c4b7a085e754c6d359b707ae2ded4dd378348fc") [ 3418.992733][T12382] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:17 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) 14:12:18 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3419.175167][T12382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:18 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x60, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:18 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000005c0)={0x6, r0, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendfile(0xffffffffffffffff, r3, &(0x7f00000006c0)=0x10001, 0x2) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10243, 0x60) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc04c5609, &(0x7f0000000440)={0xffffffff, 0xb, 0x4, 0x4000, 0x6, {}, {0x3, 0xc, 0x5, 0x0, 0x7, 0x20, "3e176ff8"}, 0x9, 0x4, {}, 0x3, 0x0, r4}) connect$inet(r4, &(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10) (async) fdatasync(r5) (async) sendmsg$nl_netfilter(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf8, 0xf, 0x7, 0x201, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0x1}, [@generic="2cfcc0df08f65be9bead2361f30b208237a1bad42ed950d192f2f7fa11e6f7abc75edebd741a2fc75805d9b8204249d0887190f9687cf74eaceea00f163d0b0a0ee74dc88456293ccfe0690d74469e21f1e2865aecadabdb1a047c145d53cf661f888f38c1605b540587a518252277f104f43c66dfa0776780bae0033b826162044efb6066bdb4c4b1208fa6a3a451773f52fd4c3077e0c800a5424a754d5034b06ec80c723d6d59723233fc6e2b61c1e2b6b51eff41c9dff20ba9dfa95cefe4e8def819afcf297a9b4e1d0b231736ddf5bca8c13129182c04eca2f923320d04d12092"]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x400ac50) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = dup(r7) sendto$inet(r2, &(0x7f0000000700)="3c63ecefd82739111fe9408bb18545759a7adeebc20bebce258d0a7b8aaca46eceed555294c005211ac1dc31347c309e931ad959957d02d839731e1490600b876271693363d5a63ea2676ec5d1ac5ace1f25fdefd3b08718fc830be80e7e2059cce943ff18347628", 0x68, 0x804, &(0x7f0000000780)={0x2, 0x4e20, @loopback}, 0x10) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000640)={0x7ff, 0xa, 0x4, 0x100000, 0x8000, {0x77359400}, {0x2, 0x2, 0x81, 0x5, 0x2, 0x9, "ff34648a"}, 0x9, 0x4, {}, 0xbc9, 0x0, r5}) (async) sendmsg$nl_generic(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x219806c8fa4d5aa8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x14, 0x2, 0x70bd2c, 0x25dfdbfd, {0x16}, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x29e37bf90a657d36}, 0x44) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1406, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20000050) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r1, r10) ioctl(r4, 0x2, &(0x7f0000000280)="a45e9468ce291676be9d89be06211aa7c0c0927251234e4d30cff3e6426f632c4e0b851ff99b83beebd34df6faf3fc393506ed3ee26f4e44316523a2e9d8d9fcea1a6b338d3bc960489b973506ae69a6c816538281993f215d90055a18fb577da9b6e770bad5804fedc9924b7dbfb3c15028af31c5917d387e68efe0c67758a81f4142417d2bb77752be09337ef59c4b7a085e754c6d359b707ae2ded4dd378348fc") 14:12:18 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x0, 0xd08) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3419.535823][T12395] netlink: 'syz-executor.2': attribute type 27 has an invalid length. 14:12:18 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4c00}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3419.750562][T12395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000020002e2f66696c653000c61d4af91089e907000be43ce454edc41b0529b9e6b77ce09ce83b8bb4b32d576a626274ad63309479117b00ed9a9610e4b75d5585ac50ba12730d81465ce63730f466a10679d6a9a0be09fbefb29e37683bf99e4bb90c485710077232034c2c9bc32b13f7ed01af146f7ed5185e8277b9dfdf94f80ff7fd58ae59c1177e8ea65146a3c50db625645707f4c37970769a19a69bd8bf5ede4f357ae25f016279b27000"/188]) dup2(r0, r2) [ 3419.925355][T12409] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) openat$autofs(0xffffff9c, &(0x7f0000000000), 0x408000, 0x0) (async) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000020002e2f66696c653000c61d4af91089e907000be43ce454edc41b0529b9e6b77ce09ce83b8bb4b32d576a626274ad63309479117b00ed9a9610e4b75d5585ac50ba12730d81465ce63730f466a10679d6a9a0be09fbefb29e37683bf99e4bb90c485710077232034c2c9bc32b13f7ed01af146f7ed5185e8277b9dfdf94f80ff7fd58ae59c1177e8ea65146a3c50db625645707f4c37970769a19a69bd8bf5ede4f357ae25f016279b27000"/188]) dup2(r0, r2) 14:12:19 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x0, 0xd08) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100), 0x0, 0xd08) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:19 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x600, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:19 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100), 0x0, 0xd08) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:19 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], 0x0, 0x0, 0x0) 14:12:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x408000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="00000000000020002e2f66696c653000c61d4af91089e907000be43ce454edc41b0529b9e6b77ce09ce83b8bb4b32d576a626274ad63309479117b00ed9a9610e4b75d5585ac50ba12730d81465ce63730f466a10679d6a9a0be09fbefb29e37683bf99e4bb90c485710077232034c2c9bc32b13f7ed01af146f7ed5185e8277b9dfdf94f80ff7fd58ae59c1177e8ea65146a3c50db625645707f4c37970769a19a69bd8bf5ede4f357ae25f016279b27000"/188]) (async) dup2(r0, r2) [ 3420.842615][T12435] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="e8af1870e102ebfd4ee3d4bcc39230ee6b74b79b5671d026693d9970a296d56ccb24b25ab5e8993761c53b14f5d44121dfffe1effdde679062c35890f9457f81d6c9", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="d417abdb5d73f5ec772587cc1796da39d496de6d82d1ddadafcd8d5f0bd089273327c8925c52cf73d3ad525ce38d3f9468553452fc84a0bbcdbeed39d0ab2006aee4dfaaea2d1872d66b3bad05284649cb5410812c11562f826632774d03cd4118baabf99bd4d474dd37577109c9416522a882de023b836ae7ef3c0f7122504a97e017f8a360c82b224a3946f5d46ee4bbc95b118da0254ae46e51ae1373c85ba5c028054c49559e1dd80fcfb2b9f89bab941737f392bb776999aa751e17ac80b72c3967dd6f63939152ca553a15d650ef577670af61360ae573ecfdc0cdd39871d97e129f1c1bdfcd6b087eee3b05fff8ef8e28d55dc3a5e90fb3c460bd3ab7b9c3c6567898d15c11cfd222cd61cc95dc8ec17253a473714d96baa3e6782a1598baa4c1713aa61df268b0ddb3cbdc725c2ce6c9da8726c267e87d0ec19a89cf2b78be8c35319b1b8433bca62741aae58eb569132784ba43166ee0826be5b610abd54d96703a5a7fe48b24a918edf6e22b6c71391cc0e9c892193a847f4ff2e22c1120cd029cb8f72ffc69529a8363e048ce049ad2b5043b6b2506486d55bdcebd7ccf6fde59792057da2b2808551d5324a10f89670e32c195c5ef34a84a88cf683c07174ae27b94610a4e2fffb41b916f2e0ab86abe13154050887d942ce0ab5327b9391db60ee91fa91fd2848ba3a85f60168765bab105b5c274a699b1cf43b7e11d1e6b55961f89e768e53755532dcb03a8cf8676aea1823df1569164887bf18ad5bc20523bf91f1862546e97b84806c3742adc907f74b246c25a8a97faa17710a387606f9b5f176e152d518f3152f05361dc0ec9d3f2de65186a8013a77ffd3991c7861c7031699e3bf818461e8aa68943cf684de80a4c72eb2f79a1142a0af4fece8cec33bd75e5751e11bfe45b3760631c51a35786b51c363afdbb8a11c42778efc7ea28daa6a7d30b71b39e8823cdfefb803589fc878951782bd696360dcf9aab5e3c820ff8ed36f8fde9afab78eb1b0952cd4d63839d1ac0514ffeb3728627ad1832e9355f7a977d5103109c74ae3947d94301f258715733464ce64868886562d0ba58cedec5922660924d7ad8cf1911b126cdffb8345d87fce3d60b5a056a863fe9093ff34c922c6c67b477d267fb841e565c206d0b1622214230292184d51447f86f4de0bac5b1959097f291063878e52314856fca3276ea8c46ea15b7a9d974e026e5c1b188e5cc4da8830ebface46cfa8ebec724412170425cb6444b4bb50a0e6ada72fd4f9efb56147057f0bdd955b2ae9aa5f3f337b89b8f0fd4f6ed994eecbedcb972c35e7ba7a018c72e3b9f73812e3e4986293ff127c3495e70646e36dbb46e88ab326a6522b8c1a27f08b76b480415293371b548efcbdbbd99b81ea60bc47d60edf0b544b53047817621f9631d6e555b65c204d20ed1cd18431e17a1536358cd83996089649f0bea7812cd71027cee93cdfa3a70e962b6b7dfe663f42dba2e0906635c3b1875453964bed54453fe4a907cca26584d12089f8ca0193b2c407cca8dde9baec5ea8f8a380b3bcef8fe251055615e6265d34fd4af25a4cd7b439d6dd7b06acc3eba12edbe872f4f2381a822b3071a4a54c89a0ee37ccc36a7f4aed72978b0b8288b637ab97628458a831d213558d936f5f88c81fa771d48f112c608bb2045c6eaee7f6235d2fc6222df9c42d2dd447223269e5258f6c1bce4b397dd847e42860fb16ad3a240ccbc1fe501e073dbac0b7a4dc2b5a14e95a39e057afb9f5183752c4b033c20b50ac1fe917a9a9627ed70cec6f46ff966e8e48cf714fd2f7134b77197f49b173f9f4c2a4febe11efbc5361f9aadda85237009f41175dbc9c6f7242094daa1d2e9393141903ecc24c7b5ac3acbe7cc6112d6072e885ec427fa1b2a68e987b7d8d47a5c3c1f98ed22c025e7940d5317ef9bdcf627c7dceba27bc1f0b0dfac1eedc0d6ca9a7afbd1ca5eac4ea34914185845c619596275f5b4df7381ffcc9b010a679a2293c861baee4c9af2e852ade750cebd21b5d764d8e6e6ed6acde88992b9725c415d7781913b310bd10dd404370c0e46dc8907a14dcbb7a9911aa6355efe3d62bc4ba27abc1ea6ef84e2c6f6b51f574bdb27f958fe2f11d70320eba4b3737ba4475239aa6deed60a1f043b1ff929ba04f77fda4aed5df5a39511e68d23aa99d96a12cb419a276f625b7bbbf6650085757a0098d797148961e8efe13d2de33c8fb90e0a3ba84d7f0ee7f0fc51735af18f44f6bff02bbcda0b6adc814c5eed5a76f37584e4c4872bcd2afc3602cad5ef75cdc095ec1b87824989879ff8cc29bd0dde73165aa9e5ddecaa5266978c0451b40485c98402352799c4c4e98379d62d8a1917a3f3f1bfdb37c094076b28a223a3c7621092ee9989fa5fdd78dce5f38b9db61fdbe7b93a4449533e1cbd39b75d40d784fae45841a6fe4a8b20c2c2be3c5e695e31295454e502fe5ab4b518dbcb740ab0fa7aa434ce5e18104640af2b489cd55e451a8d570948cdfbac6c9e2b90c496591842668e349df40d849e54cb261d26d61c1d1ccba267c6bcb039e5196c56bd1daaa8c51969f5720de58f98a6cd42946001784a73c195db35b297de7b78e02ebf8905dafad0f43a32f438722964b28dd570598753aa4bd931d0f046c4d63f02eb8a811435bbe33ec2f1d21909743c9f1dac770b174cb86923357a7df09ac701f0e8f12470dd020d3e2d086a753e83f695c396a8c9ebd3d390abb5e48cad35b8a276671aecdb06a0a91bbe43fc1c7fe0e7fbfdb4afbe708f6d308fcc81cf82c47dfbc68935fb35f932ea3aabfa8e28db527fccafb7eef5a194a0381b078555b7ccd427de34c86701caf6b6bf8075ed07d211b468f0cfc1476abd2d907ee96952acc21d0074447315b6853f261188d2210ddaaa7e979a05abc911bbaa631202a62d7869e8d47534826df10f38237c28a1609766c76b08eed839049bafeff1a8698eb800a85c4ac4b5c7d9650a5a20c033686af6f4b104f0f97652ee622c2d5b3268205eb77df63f5cc0bef49ae09e4052cd2c25a88398175efab856d29f7fef3c38f4438c947935a84b60625eb97f54d50c2b903fa37ec5f20990a1635b058279b686ee5283d555af55dd0aa33f02a0ab3d873aee46b90602d7ace6943371ea4075d4168536f947f82f65fdb98a8eaef5dad8a5ac6722a58860ca763ffdaf93ada5d68101d751b3b98a171a0f49929e6d5abfc6e7ba6c88fc08351e58e3233d501865004ef1eb2e9ec047a3211c1ba0882d937c5745bd97b13273bef684525f561cf233eb2596e591cb8cd47ae7c17c61d757cdbecdd6738f362209ea039787d89bda3c9b95ca20fe1e7ab4c7f78cc606aea94657b1a518c0623378909b1eb61a4caad085284ef9fe7d14a6ba884953324e853d2959e4bcfb0dfaa40e06365c5dfc75f23e12790b25448951fc9fe1134f3eb13fb74e2a556a5ae23fded79aae135e12068b1098b9f7e74202cac70d9358ea0f0e41fdceae86804523ce797f048c35bf9b6faa29f7c8f3a9c5f0096f1107ececdf2ed1ef626a2da9e2ed5451909eddccfc1589692fe4b66934ec7d80a528713b7f4becaa25436440fca6bc7e4b41e3c2dab2c2c00c3217c7791a756303244b1519af0c627a9cce501424f19fdf1e84f41db1537bb7ca9c6d1eb885ac2db2d5e8a2ebd91a37793204a8dcff3c794935ff36018635d83d85ede28960f19f5aea50432d6a57128bbb4c0b32b160df72c9ccaaba9c25bace45a15a8a186d3fc3f5f62968202ef9c31039bf0acc8bef81aab86d119f8e662aec1c32c78a2fd7bcf5633d5e4700514529e03841ee484aa1073e599c0113df1c43bfed99fe98ce167d5506b79000923049d5a52ef8233ffc7849c68b383c2a6f4575e0046dbad1d2b95a671f08c187f181497c646ff8ac4afb307974a70798adcb90089c6da8269cca6e0ba0944e5c397457cc8ff200f95cae5f8e0220425a7a206fe43ca95d2a88c81eb1206bc9c3e4defe5cad8c5fa378f8629a50a8545aa901cb099eb2a094baf62aa085d4f903189413ad1c67185ad28857ea793c8cd3c2914d14f16e9daad408fbe6f06d0f31e173a345c5ad9d41b7bfea9e351899f5d3d25f6e274d51e90c064624ef7834d7ed420398dedc78c35cb629e24efe05c0c54fe4b3a6cc49ecc7d878763be8121d9d4cf506355e1207739731fed32967fe70bfdda72fceb44ff94a4d960b411ad34250bc5088b7b4b21ac14edb2e0589fe0f44f08f2e784c568d81b573206ff4373869ea83e73ac917cd48ab99799814e7cb7bd2461c458248eafb3be7c79ffc71f2900a6ee0371bbc85aed0f91b394e46447b7722949c8659e46bbca18bd0cfc9dbbf443e5ebbade96047648e5b4a6392b68ea3ee651c9e678f65d8916c400bbe8853e4b95ef0423e7287f33f2aef03ddb981c9002b9c0d41cc0e07a2d72361cf38038df4d070b9df8e96e3ada9b17a4149a8ecbeba29b0c18dccd899ab979335c323e78360c72c6f6e0023f8776b2fff745b61bc1d8b0a2a99445814bb68367ff3caf7c1b2e3459222c60e79fd70c14fa28a2f7f6727fd6cf2c4db5f682a3cf3babcca0f5990ad2719c5f4083231fce818e3aa4669f6f778a811eab6fb5dff4c0e4903fa5cb967ce0146efc712afd61f24549cb20e1612860c318509e07aea5910acb31334649024502954d7e9da7e19b5b27da36c78053239dab588891ccb7e901921a51bb8dc82d12d3248d9c7fb3e0f50a048ab188c80a2bbaf83961dd15513000b085e5ec9e963c0df4d3873d8b989185c81260617df09e09394d4784b3c52114e58f22c9669f02b9c09c3197edbf0a7e7ca9d2e9a41a7ac48031872745f2047059a4b1acc29baef672942fff23d378f2d8635005be76698a1a9cc706f479387087d2436e6ddb3f12ed150483cf81040dee92f508d199b1dacffe70ca1a2c346d0f52c0469b52bdc621077011f0fc6192bf25cab7ab92d5fe9e4806608ea2a1c7b8922e1b9532ed1f339b4011dc49cf3fda9c6a5a62fa679bc2bb024cc746b1a5bd211201d861e3e2f583248785a18ed54e3e1e9b3896f9ebf601903adc0697102065b212b20f487b6e48e131adbc281a94f1e670e6a0487a052b7ceff33a8fad38782742f5ac84e54291caa059dd0e647274ee1a6b3e49ea7a6ec35e5ca4994863cb842c29c8edad9afcd22bf90b8c933e3f579857bd5accd28da92e3599b34e545854b18fa890c3aa44d7c052bedc4366bb6ea815c8f9380d4694dbe7a901b488b76783fcd6e5ad8cb98d04e29c95c8733193277b2ebba9405f5b11874fc9e34af59e92f1cb07eca55b1624eea4bb0048b1eddc6f68104760ea70b37e332ad9c8bb9891be9ba5157614faf657c458bd998152d0c539887e5aea2eb80118f94b4af8d0c37c8f5b5f3ba9c71746fff9b99c2f90f8c104af99d98826e3b3317e3fdad748f11cc4f64a6f19115ebc6a414b76bfc539ad331df3eb2418d5f2924c67b0509853510b0f34fb3018eed238845ace19d95fb3c8b4d5735a30603154984fa7c8cde06f6dc397690816b4f9a7cc738f3b5be74fc77436263cb99a14fa9d96f4e9bd1fb57a807f4a7f0d5d1f2aa3b7c905d11cbbab63890d1c11fd1182bf8cc94ca80d3e41c6ee0b94841074892ed9d6f928d5848ae02efac44e40da13a18b57a5fb09b67de88c4571f738d081ce368d2ddf42bd7c8f882e3c826c16e32504a4fa6ea0781e6e92db90d9a486e726033d28b157182825cfb24d2bef7f9044d08fd", 0x1000}], 0x2}}, {{&(0x7f0000002380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @empty}}}], 0x18}}, {{&(0x7f0000002440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002480)="de3816a06fbc1051d05a8bd4cbc3ed9cce571a08c06d9c26f7bd", 0x1a}, {&(0x7f00000024c0)="2b998e0f1ca8f25d819a1e1bada7ff2b514fb8f0a40b9299f3122d450c7bc35386a16ac15824b41db6d9233d1b70f648b82e7f4d5dfadab6efa1a89227", 0x3d}, {&(0x7f0000002500)="2a24e95ad7775d67e8a0a118bff07b3e84a8f83db7d034a30a750f5154dda1f04809c3b68ca7e192fe2fdede846ab28e1335bd473211c73301aa31e0a043d81e2a87a342274822f525d44abf5adb855ea716c076761aca111ef122693865ad5e9099e842aa9651a67ac22b8c337403245b85d0ab6bea5289af62ecb3b23ce5c57f4cf95b9ae7a4522b5160c84cd010c68dcda2b1b4fad2c2352dd9142ba1f06d8bcdb129080e1e0234", 0xa9}, {&(0x7f00000025c0)="1eb05a71b0727dd07f8f87f53e4c6aec1b5729d6f2cfe541ed1fd4c35a230f924381232bf4dff491e724937946611f6916dec367451fcc17ce56d50226b2f89613d20205668c17ca21", 0x49}, {&(0x7f0000002640)="42f64dac1643c799ecc3a23e5366a02743d3bf4efb40f896d0b026e2a9b4fb8e5fdff6a0a1dcf010f2", 0x29}], 0x5, &(0x7f00000026c0)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xeb, 0x3, 0x0, [{@multicast2, 0x2}, {@multicast2, 0x9}, {@private=0xa010100, 0x2}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0x2e, 0x1, 0x4, [{@multicast2, 0x6}, {@private=0xa010100, 0x1}, {@private=0xa010101, 0x7f}, {@rand_addr=0x64010102, 0x3ff}, {@empty, 0x9}, {@broadcast, 0x7}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x2, [0x20, 0x5, 0x100]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="3a1e816cdf5cf26f48a5d60851496408187ff6c603b7253b297b94558d588e98beeeab54aaa92f2351882cf96e0feaa648aaf2df0d24ac14cf6508e4dd20b42d382a3a32acbc16b8f3b8826e0d0ecdc58bd336052d33f3f1a2298956b68bf5e154c59298de429cb527d1fbbace4157643c8c7d61267a513e9e6739bc0ffcefe6e2711cce63e8d47db980d31526c22bd6b8f749593701cd3d000455da401d0c6a018676626fe8256c10d138e46f", 0xad}, {&(0x7f0000003840)="f49e3cbe9474c03eaf9c37f51adba286e0355040ce642deb0ffdc98e22c935bfb08702ba7f994e1e35dc86bf1296c426ddfb376fe609dfbe6d297c8528f29309bc8943bdf0a0590d2aa5d8876d8161caf2a08bffa1603e0838", 0x59}, {&(0x7f00000038c0)="0227bd49b85ebe04ea82d80e46c018230df5a812371bc86df0a34fb744872dfd4eb430f6ffc1b15db0802b297f6c7f00d7c6fc5eba9feb8f", 0x38}], 0x4, &(0x7f0000003940)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_retopts={{0xc}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x9c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x7c}}, {{&(0x7f00000039c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000003a00)="b57993b63f16e8cf519663891690933d5cfeb8b423d685de5801206e1007569706d4", 0x22}], 0x1, &(0x7f0000003a80)=[@ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x9, [{@multicast2, 0x1}, {@rand_addr=0x64010101, 0x14000000}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x2b, 0x0, [{0x1, 0xf, "71091ddecd41193ce58a9e76b9"}, {0x5, 0x4, "24dd"}, {0x5, 0x2}, {0x7, 0x5, "920bdd"}, {0x5, 0xb, "d33fe19ff086635ea0"}]}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x29}}], 0xb4}}, {{0x0, 0x0, &(0x7f0000003f00), 0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="0d00000000000000010000000100000010000000000000000100000004000000800000000000000007000000861100000002000bfbb38d76ec41442dfd442cd851ac1e010100000005ac1414aa00000006e0000001000000020000000000000006ac1414aa000000028927b0ac1414aaac1414bbac1414aa7f000001ac1e0101e0000001ac1414bbac1414bbffffffff890749ffffffff890754ac1414bb00001000000000000000010000006d050000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020acf0000007a14f7e9"], 0xc8}}], 0x7, 0x64048810) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlinkprop={0xf8, 0x6c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3020, 0x4120}, [@IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6c2180ced937e5dcf270e8816b22d9bd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4ee8c9ca9211666ee1c112e992fdf944"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ac0c1fcf1ecd7dc57358e67f4f53163a"}, @IFLA_PORT_PROFILE={0x7, 0x2, ',(\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda398f08049cbcf66ee571c8e8f725e"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a271be65ca6a7099ee97a347812f3f4c"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\\%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "54e43344f7a8f37240edbdb6d52aeb5d"}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}, @IFLA_NET_NS_FD={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r5, r7) 14:12:20 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x5865}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3421.100794][T12435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3421.326950][T12446] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:20 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 1) 14:12:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="e8af1870e102ebfd4ee3d4bcc39230ee6b74b79b5671d026693d9970a296d56ccb24b25ab5e8993761c53b14f5d44121dfffe1effdde679062c35890f9457f81d6c9", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000340)="eb90799eee7fb8a80d00e36467cc90d304830a1241a1edee9a9f6971f0252c65db280de6afd244688b54b9167ab2f571facd1fc63f43349f5973976475474aa25cf023c1fd07bcc11f3aa88a6599d1ef0da51af929d91f126c456b09f5f676bbf5f650a2397da0b2b2a74449ae6d5d59003d4a445df1d13255e275e92db6c9a3261d3a6a37aee8c9826dab2d94f0c04e7810d60f7cad7972e5d3c03f9d5e31a80603e32b9d4ae3f6b7a7586e9e428a567558048274901276689f1e9412007983a869e88131a7695e9cbc5c5d806945a827199520b1ce0146fc1c3026d0c3fecdff0fb199060009d0c86a6bbf828dd7e53b3d74929712cad9ce4e29ac4ad120c9efc740c6053835fee7670105e15a4a37acd85bd86f814424ca8ecfbc9c4ca88244ed0576351b5f3f1d209bf9bada74142fa5ba1e4d1db4067a74e6b70fbe8d6a4291f01cf6eb50546f7740152ae9a03022ab433afce955e33bde979aa9d3358a2f100143806e44e65129e803f9753f428b5be5a8bfc70c1311319a12e3a758164a3f5e051aabc28870c77454928f88c03e0a9004ab37505987e838169e2ddf57f1c091064ec9dedee9c70daec6f0cd5db5a2abca393091f204ab7fd4d8cb966e8ab950ac76e7d1ff331f74497f704dcad07026d0df4086f0d39ffde51c5010d510e2b05c2483d1732ac9db93711a462d7a53d8490aa5b329ba771b0e4286b1f1c099efc944d3600ecf0c661e971419d6b70ad95c384820e417574803f0dea82e0c699bed085eedb8dc65e5408cc3b6e61cb58f9b4ba1e683f178d58492f13b3950439b8f5f6efdb4e76a72c51e9f2050c3d38a359b78c11a96e1b4045412268bc19b4932b9b49263e41e43fe673aa73a0e392342e46d5dde85bb9bd92826db1b6a9842957b042f9867cb4714c5d91953e46a069d494f4a1bfb082ce99bdd32e5b062cc8d0c68f870942f729daf701decfc0cb9bbdf6ddc4b2454d002a43cacc2540645e447d9e3449a49f42d41362596acd4feae9d481926e1a808a1ff491473e80bdb5e7fc70a085e7ecd92d6dc9f89e6e6f12d0a9ef5b647ea0879f2a2c24c315e7e7693ee9c6ad113e6ba50cddc264ac41c635a5749c8adeea0791e1098c240a08b0b04a2a6bda074b4c96d3687d048a1894cbc09a4e9d50d8bb6048a90b5f5ce4e959c5571aeed5d3857116ad77676c5d532a12a48cb021016bc973e690f180399906dd176a98197e7955e9f49d3631c74b9b4fdd95df1b4dadf4b10bdeb2713af585e43ac7bff21b455b39c3b0ac125b68fb22f0aaa0d4e8257d352445be4d487fd889aa3b9933c1d56d23b0d5591f49cc877614c334e2bca1c71e4fa4dfdfe4f3a2923542d740d57ca78e47f371d3aaf04ab54ecf576345cd8d49a4c70d60ada185960d08aee56fd9b318809527e78108695d02191f096956bc0b534914978ec40f7e97dde7d5498cf6ac00078eedc28b7a724e0a11550e8be86e73c67df9a70934a2b567ce7223720e96bdb693367706a4c8a937a5c9e59d11a7e0b97b2f8feaed08d7dcfb3b0a0fdd04ab80b09ce17593b4f7f2c26096b7bdec25b9710658e1a06023817d8692eaed0b015201af260d2d88eb68d00ca9bd87407cd553cff0a7c17a1b6b5c2d6f566a202f6daa0b6affbf944c69ef3d4a54746efd58b4d5cb416fdb0e3f1147f14a0f6f4a3072f6f0923754ab43a9b48407268f9c7cef1da27567d0ac53151922a3156181f0886204134a78602dae910e67ff054ffe9cf5fcf2a09dbec54c1bd4921b1eeee31dbdca72468a47ccc921a409879646dbab54a061cee8d40b5c1633444dcdea2319d0333cbaed334a1334d573d0b1682557e34c170918b687aea0a7d29f5ab7de83cde490edb64523825f0c43669fddfc3740ec5f0325692f1f92a302faeb907f27da426094dc644c5b9bc2a93a09397e96a8745ab47d7ba503f0cc4bb49bae9a55b2cc9e8714fcae60579e24dbf697356c1a6fd64757f4b5701b593090efbd815f7c64bc786bc8a8bc34e8cf9f133b7eba8ef4c4b506af3b4fb2c2cb7b11e654c51238f5640457ce6022b3babdf5f04bc0bc9ff76f4ebf336d282dd9f11b1cc2beb6594db545667b7e52c7176411304461c35789f77540102fb9d659a1c2c5ec10e86ef825a1385faa343151c74f649d30562d930be0c5d1008b07013d487b9feaf51137d7d3bc18ee18b7fa529d62b9f2fed3d5def0201a9ae8a18d0218b4da0902d396dc57e80deaf46e252c4411c54f316f6a36facee408f228cf5be734f5d3b84955ac054e883888e96f0e5e24b516a6ae41df2caa5c119528b9453a10b86c6923feccf2878cfa027cb4aa28522c940ccc01414c7ccb2083c99cbb99bd2a7bd31104aee08f9a8f65b86ad871a928b0ef5741c55048b3d3c644c5d44a93fc0bac048879bd09719be67a70a7a0db575b2df3d9558795d545030da0c5cf5801eae6b9bd705ab79f4016d5a52a6de07092af6e2ab7c0b0c2a8eda92147837eea4fdcb3171e33ef3f5d7a1e4ac89f1b7ac1dc39ded333e059a79b7e40b1018fd79420e854f7b7346f9584822d80c9c56aad9d6a89088436c13200cbcd6be48dfb1c07121e5e3f2dceab9950a082421741d005f584248b2d3429cf8679440b273f7319b3b5f47eb78805acfbb055a2c2d05a841a084e80009a9e6bdd272ce8714e9549e3592f1266bd80f718f97abd6f78aba8703d07738a263da1e51c0f6206e5ea78adb9c786600f2a2cc7203c9985f47b5822143a081faf3d2268b34678f0c102f34fec2e299c944fa66f7ecf0db93a948ff6b8f5e5520d7258222f0c563b311a27bc8afe5236062cd327e9975d04b41c4acd0115750027aa99576684d7ff3fecf76bd69680696cf791bd4844730239694491781dcd6f3ef21035996caef3e09cfad19de32af2407c6b563c36b14d4094242857a3a6faa187b36e7338ad9c841106eb1fce6effa513f9282feeac28ffce738109939e5f4d7881f2f263582e283a4f0e2b255ceac7685b115dc8a8a8678590bccfa6ba4fc8131cbe3908c132bdd57bbbf1ebfaa8eeb356563fc49f92744d691fb2594f3d01a622741b122f87687b8f3f4c94ff81752a9bc701602127562759e2d4a4866a68f142fc2317619f69acc4bdde2978904838169177016b3e0777a1352f18c875ae39785fb4a8efb61593b87eb3bb7d725c1fff1cdc576e72cf3de628fdc77b2d5699e67fe383448770973d5f6be1950f8f8d62f43fe82df0a01f44492126df344d333c578182e87f1de57dcd0b35174f0b256c90ed3a38064f0e90d43725890047438a0c1c0b9ec338374de1a8a26b463ab86d5888e1192e2f337f31a2d07f31a882cd2a7fb36d8678dc718aaf4d82ddbcb796ccbb918ec2f004641dd15f05a68262e69bd26f48803c987df5a476db29e54c953a4f02de2be05b3ff4c48612bbdaff7f23b214429abe7b5f877de1770dd89af6d3066d2971677e710353d7b223ab34b1150b1c97509a6fdb0fd7436c1e7015fd0341c5ea41e9edc6ccfc6e2a133eb4054dbe6f72b9c3515b0a54318f85f6a54261ca62085861be13f5863735a3bffdf50b1c3e6e546d47db9fe084377a47836116bc8d0938f2d8c951897401444cb1f6163aa8e8ff03a36f30675ab36383f3a2ab268f4c13039ddc26c2f09724b153478bad3365691076cb1bc2996b8f2d1a7b63a3690052df72f45ef71db292e0c40fd3ed50d0590b269f55c82349ec293a30156ee2b5a6efbd6df9a87cacc1cfccfd20396a956f6ffae602010c415622fdb912d283bc991460b0d5a95b618ca198bb0862fc9f524cf7364fb33375c7dfd427af026e4d4259220c592b0c40c4866a8df9365e9b51abb67c9c38b0b2898c06561eddb3c4fed63b1c9aa6819324218cd4260c1308981755a9c8b8e70718c6851a35125e01f6f73c710d53a36e812c29296d73f9f970c3e0fd508a75c8aade4bc5067b3d55b47bb72aa04476eea07b9a7f843e1e1c72e5b786977b0204597c63437d17a5e6e066a4d88e492fc061acfc435754064561b6cc1c9fd24072f334a07023e30bb634a6f69fc8e33db6b219139a6ee6f7f070ea1cd260309c2d321053c84fcc1b5180785f7fc07c9767971f6581c1985751d38c6d8a793ebfbba7e72c6dda5a6160e47df0cf1d378a0c88a9acf9c51e7146e4c0624259781491ac351ef133f98c1ace85cc28d92022652e5aad0e97527fe4b61edabcbba6add9fd7c2d27499ac5218b661fc45dfb4e5744ec62a2287e2633f1875430b11181ab7870c6b71328da4ef8e3574a6e4edba2e20845a8dc4954e8b06246c3eefedab1472c12fc3fdaad6b50ff44e441384c9963ef8f60c023029df01456b6f1f3a0856ec6689dc15a186ff650bc847305a515330d71a101dc9a5faa41b1af3cbfc8a5c706ff6e1db96c5ea72fcab1a2d717f422e139bb8c525160137c8296804d2ab7fe457a3a46ebf030e349a37e6bd441d069f4166a02f8a50a5533d78fd71b300aeb8ac210a850e46a656168845d79c5e47d0b3eb80b1dcfda815b391c91a6930929a315109d3e2ec42667c4b139672aa7727044e2ee94d9d525f51511e10c7a1e9e588ab27d8a1816d4738cc45538437fa9ca694d60a4203491764c21d55a4c947a32958574bc3abf48523829ea0c830e5d112bdf2a1fc83c9bf029970d91c49382c63fe4bb3a86a731e27eafeeeb3f9f37a1ba1c328e660f17177bd12cf1eac6257a359e4e83e7f1743b30f16d8386d4b6eb9a9ea9e462b0875c0a854d6a1cbdebc827b6c35fde8156d6b2cf02e02e49d1e0305ce217a2ed22881d2b4c189fb2c27eb64026c9b805ebda9732daf72bcb2388c50e6864f86326aad04af96de8ab5ccd478371a8df9560fa1c65c906eb91b7e7de1964bea64621218df8669dfcb9192d7b52ab16d4048187faf20fdf6d55223d3d8407852eafae433a24f1d5846cc7c63884aef9e65a5d7564e58e8864012df3ea5c5ac4ebeb93320df60314e3fb56c62843a7d20504a2824559595f56c53e273c6aa3f6031f8fbaa491a1fe9e2f437c025fc8a62a96b2581902c73006e2ee2fc4c7372b1f4cb60c9f2a469cc53d1b54d8f3a707bfe16536ebc9dc6b593fa2981c6e1c64b7d988c87bf202ff3f0f457da2bdc784336ba3de9678d4190cfec62160f40018389ef39d9a91bddd916575e4ec60278f7303dc677c5e5398b2039241df86632967b82a328199267b8c9a819c26866880c4fec3d32f43409e832bb8de7e49601c0879d722a9491581bca2a8a745ebd2c11d5d75ebe330df7e822faa52d907a4fc76e781041e7b3f2a975baaac67846ff7b611e951b1a60943a5fe60de303b8d53f44b8e35054c00ce935f8bf00482ad3f2f415d0bc65b7fc8f96106858e335167ac965feb9ed70ffc5870785337c998d2ba3987546bde08dca610af986ee0e4928b508bd77a0a0f314e954b78d232415f31e3c032d0e4529a0c7ef774a239a7d74c4157a158b114190fd362482d912a4724003bc0e265fe95fd9c10614ccccd9fb0cf5bcd65a41a98bc8fc4f6062c2e96cf7a71624d898cfd7cc91720012efe8d8e9a1b584899504e5ee77dd7e02e0a4b2adbf36b33ff1cbd4033762c3ac07adb314c4ace686cad5d4c6ee3d08531a94e9d6f5089e1ac2943db8e92d904280385be3fe583172f596f31449e50930fd16cf262c21836e9726ae5cae46faadfe9686aecbcc99cab03f1ef02bba861a1e45ce955459a9ace42ec504b376a09694143854062db042ce96c82128e81d8294a257c2e1e5ad", 0x1000}, {&(0x7f0000001340)="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", 0x1000}], 0x2}}, {{&(0x7f0000002380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @empty}}}], 0x18}}, {{&(0x7f0000002440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002480)="de3816a06fbc1051d05a8bd4cbc3ed9cce571a08c06d9c26f7bd", 0x1a}, {&(0x7f00000024c0)="2b998e0f1ca8f25d819a1e1bada7ff2b514fb8f0a40b9299f3122d450c7bc35386a16ac15824b41db6d9233d1b70f648b82e7f4d5dfadab6efa1a89227", 0x3d}, {&(0x7f0000002500)="2a24e95ad7775d67e8a0a118bff07b3e84a8f83db7d034a30a750f5154dda1f04809c3b68ca7e192fe2fdede846ab28e1335bd473211c73301aa31e0a043d81e2a87a342274822f525d44abf5adb855ea716c076761aca111ef122693865ad5e9099e842aa9651a67ac22b8c337403245b85d0ab6bea5289af62ecb3b23ce5c57f4cf95b9ae7a4522b5160c84cd010c68dcda2b1b4fad2c2352dd9142ba1f06d8bcdb129080e1e0234", 0xa9}, {&(0x7f00000025c0)="1eb05a71b0727dd07f8f87f53e4c6aec1b5729d6f2cfe541ed1fd4c35a230f924381232bf4dff491e724937946611f6916dec367451fcc17ce56d50226b2f89613d20205668c17ca21", 0x49}, {&(0x7f0000002640)="42f64dac1643c799ecc3a23e5366a02743d3bf4efb40f896d0b026e2a9b4fb8e5fdff6a0a1dcf010f2", 0x29}], 0x5, &(0x7f00000026c0)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xeb, 0x3, 0x0, [{@multicast2, 0x2}, {@multicast2, 0x9}, {@private=0xa010100, 0x2}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0x2e, 0x1, 0x4, [{@multicast2, 0x6}, {@private=0xa010100, 0x1}, {@private=0xa010101, 0x7f}, {@rand_addr=0x64010102, 0x3ff}, {@empty, 0x9}, {@broadcast, 0x7}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x2, [0x20, 0x5, 0x100]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002780)="f7f276da86231d014660c7925d3c4f7b152fe6385fc9fb360fa305c52da54769df88d48ce267261e32806a4fe1c1ddd93a94c6a837eb0e8b878891fa595c260ec46acb7d27177e232f5ebf428b9b127c297efba447a1074260ab873c526d3d7eaf0f42a1ca40c1eb52714ab393888c54984f59231ffc006cf3691aae42569af41f8c6e6451ea6e52841bffde59c52bb3aaffce3d2d57d26a23463dc7f1377417c4d4e47fdac09de98de5ed86dd7be867457bfec847a7fcf1a63c8dbd36d3e8d41ad83cbcf0ffd8116bf4b63bd5fa8bd70b26cbfc1ce0fa09e6b95b417efd415af0d60e4375708a83dacd31055c4033b9f619fd1d038be9a28c6c1929dcceaf9693c454964959a49c2d4718dd7c69ff1a6158bbc3ab96eaaacfe8117b8c2ffe84a8ee4311da4f378604c1cc0dd34ca77ce014d2f33c3dd9d691af50e9de68b71b25a581e2ff61c1015a6cca7f1a2d1f8131d3fd0fff4a42720224f0a7671e1558de48e712820a084d612cc2569227706331a8a55674cd452777693c6c20b0b2cf4ae5fb7066e696ec3096a76e14e27eddc8dfdb6aa549813e03abfea99254538b93a1a0701a1e67c400bc8e196b7cd45614592361ed3f71a472e754c2f57a3914834c2a047ffc6ce5bdf7840aa13b51ccb05731c181185f0bb672d61effa003e98d8963a78f025b4909f5da5f128b4c06ed1bd22df016f3acb9d403cb5bc555d0d93af6f28be2fd68e9179125deb03e55f2af717a51303df50f40d4ef732e9fdb260399165f0c66e38f9a4c44acc82eb228b3fe063dcc901c755f87bb9b128095edcba35ab8844475444fa2cb0fc6998ebb0ab3f5c11c410fbe9d028f2c093e1773a7ae83331c4c89d2c9b64de3b6992b87c58046db7d4118f067f2f0fbda914fec063488be9aec77a8e2b91d2efd89ec63118d335b75721e75c29001ca3bf04248935d0381236cb19dc3ee8944a5d17c0a8e45e7112260c86f88f8e087a8fb846556faeea1af2bc416bc9ae84a82cfd164dd6f49007f695f4fd8a6c6603b3071581fbb83acef6be326b5502fe32b54ade95cc690fe616c7f8f47bdcb9787a211dad29baded8dff8091a75ae046432c9a4bd7033e9987d3a3a476d5c8f8c685582d2f6b627a2941a9e9c67caae9fe06ab01f2ffb6f75a154c9debdccb41ee221e8837f77476c74f6beaa664e3fbcfcc77afebe9a7e5a127d0e15e797e9abf5c2c5210a0fc4e65b86e57d67a7ff92c239f6f2e6b591a1dc71b71e445427de23b421acbd75a96120446d9bc75c53ca3567264bef971c597707d26f8cb9886e518af91e4f38d951d76cc8b4041ab2fe9bd221545a35c4dc4956ed58e6a55a75afdb0c5f1a0c7f2196fc2f532de8b08f70c2c2c0bad6fbce7d7a32e5328bb99fd5119b7604dd62f976c99f5f746bba9de19f951348960cc2e2e6e8e255ee38437b6e74f89cce1af66256d3b1d6129476bdeb66afe3488ec5f327168e669505b8057b0e775db823a066d919b298077044a9236af5ff1ed7ad935f81bc0e47b4bede89334649a8eb953a31f42774aee568ef4103a5b64e78a69730940ed72bfa9519fa5b2a5de7589e20910e87383572fd8144fdbc48bf12d8c5bc8af2bc5eead98074aa30945cb66810157b6be28f10aab9564f618d11427272f7aa5607810d8bd39433e0818b1f50a0db5cdc9c4db5e2073d4b944dab4a9d72c356a8dcf6eb46d0130cac3c9d6789a4d68388cdc4e0b4185857545387b4534316029e722da659a47f93261936b09a95e7f85e77156b823e9b52a4494a94ba2b5e25b85f810f69a20618cae370b8338dfcc317caea38856b4c1759471dd040f2e95f534fee8d242f0440d65edd5381823482d03ceb4d22a51bc8d57bedc02a365bc6941efe1b334bceb566be29ddde5bc5bad6befc7a69f9bd2effbf599f025d233660043e176f99fcfe2d508517589ea05b09bceb803d6eceb7cb5e478fc5d86ae87be3b7c1db530427e4726051b6f35458e2bd6afedb344083da2bf3d267bcd9e42928a6adf2dca1d9bee8d47dc76931a210a4474dfa434e82f28affe521ddaee1346485e9aba4cc6e45a41281a6146830be50cc99ad70d715f351de4f340b6bf4c7dce59314784a0504ca0ce8e4a7a0b1c9ead5e7dbb0dabb72cd259037a268577517ff73bd1d27b9a1ed129c7c26f40229d3127fab3bc36a7300a85d019a7b55b9cd156fe860679b2155c63f773d223c7d4bf07e0de6f1d4fbad4aabd0fbb519c56be68b12444081cdb2eee736f3d5ab3affc98c0cc2d0d1fe0ccaecb0c534b810c4f74ff5d86ea5cbcdca40015930e51c8298b4d54af0acd165ef5b0a7fb53eb1aeb2a385b86d46158381f7e6aee22d708353fc7b0ebe0a16f34a1de5068510572a7219cd547786cd7317890c99b10168d81e1f8d43d0478ffd617b1507fd30793caeec67f49e78e0e9d39e05c2dc362969e7736af0a288a6f4c6fb57629f6afd1d3ba62a122b07aa5008365f5976c7e746fd905c6ab7ab92261c7f6bec5206c95af851cb7ff4bb3d0ddc863102ff34e3b2cde18afa68cc074d37b01f3f7d9cef20be594fbe486fa710683201d81e04137eadd98840b7bbfeb91a19729d3fb0beaae24a227d7a27ee325de531c8e41390dac778b9bd96f4db0847990295198e0acc0f332e12ebabb57eb50e7abd885c82fb0d7cab31efb7ecd9ae1b32faa894250b0fbce3e98bc6fbbec960ed4f02956bacebe558a17142c20343ac3e3275863c7e9e874839b424c840d11869bac15bdf53a4ec037a837746271219e63fd02105a6ff8da98a320da81514ba19c55306ed64ccdc4b26ac69c72869997670bb4829d13bb2d67f1886fb17567dfebbbb8228680c06da6aa5f523ae226ff3394daff08df4e06cfe34668466a3d3e89d8e62bb0098f2a509f2f7363ce30e53eff423a9699c79864768be6029deddd477702bfdabba6bda16c44bb1756fac3d6ddcd5d10911c241d245cc860b920ec1234f09ab8482ce0afd28fce503c28587aa10592b905e8495e17738d1fda4b3cff69743511d3baa7ef17d5eac5ddbc698f6033219986ae5dd02dd111da3091548653725d015791da3d5be8774465a9a6c9268c7f152380e2999333ef5a0fa8a9003eda08605fa9b5a290bb221833d91ddae72d220c6939ab472104f35106713632714fca39e5bd4c8aa27136387702f29cef404a5a0184284b87cb1ed49105048589e2bcb8ddda6b194893f8a45254b8473cc02ac9a71d96b51e173683b372f09a43ab6881e9d82244d35c463e5d1b8dbe5ce07af59fcf0e73382d3d109caf8c120161d9d80ed076a38d00fa33725263063d27d492951d48e052e7e9bc9bbbef5b435b42cce996e2cf97dd7e2a28afdeb133a0864a3e65e3e0fa865fac18a039886df041bf971d98efebd8e7619adb3f33d9376741f768b58b751247f149fdd9eb6fa16b0c771e32684cecbca37cc8ba28815e5c0b26fab8b1e0d9cb9c22b9c6340a5f992c8dae1cbc09e1e474d4a0d1fb991f87c853928be35c4c130e691b84f660af5dd2e434edc942a0d18d32baa0e1bbb39f7b35b3fbe547122c23cf85d6e3c646fb1918560f405fb3ec530f55e92bdeeda9a5a0515d075b941705b6d9ef655dfab6651768543eed9279a7a452d5ee9d5305d779c370c664adde978affb7e2eecbb7c6c36382783ad49fc4aa331797c684feec943b37682bfcb2709b513d1fbf5fad545303c4f23fa521cbe39aef84354264221bf065c6160023e8676639b7985e518fd968b5820f6ee92edcfdde38caa887db8630820e7ad2da854f7722b736981223e8b50a22d031299deb0dd4b7b9cdb2fc289c3b56c5154d76c368daef191c16a53807a98b41ae2908c57b33683a9d189f14d70d332f9700bec010a03b70cf305a82fa82a2b94711f0cad2aae52a8149e38141051a9b547a021f8640f35418b5f70c0ff156cdbe5792cd754efc6f455c1e99faf0a3744f0dfbfbb9552706e74d094f56f3eec27dad4bdfd4b4d6938007209fc2af7642e1e47f19db84473d678dea95c54d13379be655997c9ca7233925b84aecae094458a931c9afb9a07a823cdcc600547ffb24a104c453997ae0e9295571e9b8e20a7628d43ed435332f9dc44dfa3e3539235d3f8004f52495981253f05fe7dcedaf4d7f85de6910e09aa48096abfcd30f0f75054cd7b37e60de0a2ba74130955c09b9eec459db681712fb9a9b930b6cd334433f7526a21a0d909f66540a1be7a411a05b42a8ff03a1587c5cb0bcacc7f80b17f89b9900447972d71128c33886f7b501385beea4be1a86958ec002b3aa510757f7f7cbdaafc251b024dcf1c5c1d130985b7a4b93aa595c0972e9cdb5b6f98458c4e19bccb5ef468dafa19cda39503ad68c166664ca1485f052eb548c8cf216146e163ab9bd3ffbdce2c39e91aa942664bfb6da706062ed1f523d0e5a2c0dbd30abb986b2da988e2428dd2d2407b014132a57deb4b9f674964f40bdc628a575831ecd2714c2d28734753d116a059ae702f4c97fbcd813614fd81653e16016c24f112ab9f501d664989114d1e364ff0cc1e6a09e14d23dbf8c5f7faa0523d5012a85d15f495f9e5a771db68cf9d182d4572ca7db5f5ab26ce12e3fbdc09ef712facf37408738ce49e057e3e03fbb42cae69c4713bcb77a1285faf9decd5a5629df9e2468c35b77e83992b65c3e0a6f6754cebb60a6c9c8de68565ce49a5002805aa120f57ffbe5f775a986c1dae9e691841784f23b0825be77e8329c1e7df3974cc656e91149f596cfd4d42d59a7284691178e9d7aad1257b0d3efd28fe878537df78c2b296dcfa8493eec38fffda05dcb2ca772dcdae07fdc2e78332112ca2dc25e092b928b4c777bb6ee036d3d6b86590337a9ab5bff3a141f0b035f7e3c36ce578e461b63fc4c8607230202eba56e6c81dad973967b59a074581426626023adc5aaf4378fb227e9e1d16863e82d4b2affc3a5947c8e3c1ec418f5c232f5df13d8309c00f5f2c4bfd28e2799ae4e449280ada15067d272c97603dfb34ecab7d03274fb911d96853e2d3b2a7329631017a3f800d1db6e7383d425c1c9113eb3a6caf45d7ab4596745bd6078cc3e62a3db9c4920f92054615325663388d3f4fe8a20b18536b57afccf9fab6b221633f4d0a7b5fba72bd08a248fd787d8abaf7f3e89e2684c3cffc37c8dc4b494611811aef84320d683c9d91a330ba2eff981f921adc77427cb206d2f7dcb536d714da0bad8c46df6a7113dc9670a7a9060547ff5703df167ea56dc1cd8bd9caef4a4a1f58432fea67e511b9ec4167d2f10a9d61a25088db30b24a0827da27c1bd677734d04a35fad2e034876299f9891085eb169f826d7686703c3b15cd682fa5c1af7d4dd58ec741356419dd6266f87af719e55bc3aa3a227cc6a04de48e644b25a8b9e70d188cdcfdc22e5bdd7414e482b8e95e803415f6f35e59039611e934ce696df4ea653b82d203b96857a2117c3515d7213ddd158c76935b93605a5eeca9eda9ad2336e3cb1c700f7c87d78c5793f1293f51079571f14091ddbec15924713044df9e98832151b6819d9715f0596e172b2cfedc21cbb7a3e82a1f4e68bd58a0610a69f037c4c8a9856621ae9d16009996711c2d5b6eb3de0119e946422b8a6e596840db79f794207af0caa4d842647229882b05c6b76269b598bfc167bcf6d7402c197e467948a01cefbb1c38fe60439d2573036eaf9a57ffe642d0dd5fc8fb7b4a1a2d13267a118e2bd5f35003792e94e6323744f7060dd49c0d8285b2c1edd1f", 0x1000}, {&(0x7f0000003780)="3a1e816cdf5cf26f48a5d60851496408187ff6c603b7253b297b94558d588e98beeeab54aaa92f2351882cf96e0feaa648aaf2df0d24ac14cf6508e4dd20b42d382a3a32acbc16b8f3b8826e0d0ecdc58bd336052d33f3f1a2298956b68bf5e154c59298de429cb527d1fbbace4157643c8c7d61267a513e9e6739bc0ffcefe6e2711cce63e8d47db980d31526c22bd6b8f749593701cd3d000455da401d0c6a018676626fe8256c10d138e46f", 0xad}, {&(0x7f0000003840)="f49e3cbe9474c03eaf9c37f51adba286e0355040ce642deb0ffdc98e22c935bfb08702ba7f994e1e35dc86bf1296c426ddfb376fe609dfbe6d297c8528f29309bc8943bdf0a0590d2aa5d8876d8161caf2a08bffa1603e0838", 0x59}, {&(0x7f00000038c0)="0227bd49b85ebe04ea82d80e46c018230df5a812371bc86df0a34fb744872dfd4eb430f6ffc1b15db0802b297f6c7f00d7c6fc5eba9feb8f", 0x38}], 0x4, &(0x7f0000003940)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_retopts={{0xc}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x9c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x7c}}, {{&(0x7f00000039c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000003a00)="b57993b63f16e8cf519663891690933d5cfeb8b423d685de5801206e1007569706d4", 0x22}], 0x1, &(0x7f0000003a80)=[@ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x9, [{@multicast2, 0x1}, {@rand_addr=0x64010101, 0x14000000}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x2b, 0x0, [{0x1, 0xf, "71091ddecd41193ce58a9e76b9"}, {0x5, 0x4, "24dd"}, {0x5, 0x2}, {0x7, 0x5, "920bdd"}, {0x5, 0xb, "d33fe19ff086635ea0"}]}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x29}}], 0xb4}}, {{0x0, 0x0, &(0x7f0000003f00), 0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="0d00000000000000010000000100000010000000000000000100000004000000800000000000000007000000861100000002000bfbb38d76ec41442dfd442cd851ac1e010100000005ac1414aa00000006e0000001000000020000000000000006ac1414aa000000028927b0ac1414aaac1414bbac1414aa7f000001ac1e0101e0000001ac1414bbac1414bbffffffff890749ffffffff890754ac1414bb00001000000000000000010000006d050000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020acf0000007a14f7e9"], 0xc8}}], 0x7, 0x64048810) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlinkprop={0xf8, 0x6c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3020, 0x4120}, [@IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6c2180ced937e5dcf270e8816b22d9bd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4ee8c9ca9211666ee1c112e992fdf944"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ac0c1fcf1ecd7dc57358e67f4f53163a"}, @IFLA_PORT_PROFILE={0x7, 0x2, ',(\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda398f08049cbcf66ee571c8e8f725e"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a271be65ca6a7099ee97a347812f3f4c"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\\%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "54e43344f7a8f37240edbdb6d52aeb5d"}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}, @IFLA_NET_NS_FD={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r5, r7) 14:12:20 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x59, @mcast2, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="9e000000"}) 14:12:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 14:12:20 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x59, @mcast2, 0x3}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="9e000000"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x59, @mcast2, 0x3}, 0x1c) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="9e000000"}) (async) 14:12:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="e8af1870e102ebfd4ee3d4bcc39230ee6b74b79b5671d026693d9970a296d56ccb24b25ab5e8993761c53b14f5d44121dfffe1effdde679062c35890f9457f81d6c9", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="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", 0x1000}], 0x2}}, {{&(0x7f0000002380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @empty}}}], 0x18}}, {{&(0x7f0000002440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002480)="de3816a06fbc1051d05a8bd4cbc3ed9cce571a08c06d9c26f7bd", 0x1a}, {&(0x7f00000024c0)="2b998e0f1ca8f25d819a1e1bada7ff2b514fb8f0a40b9299f3122d450c7bc35386a16ac15824b41db6d9233d1b70f648b82e7f4d5dfadab6efa1a89227", 0x3d}, {&(0x7f0000002500)="2a24e95ad7775d67e8a0a118bff07b3e84a8f83db7d034a30a750f5154dda1f04809c3b68ca7e192fe2fdede846ab28e1335bd473211c73301aa31e0a043d81e2a87a342274822f525d44abf5adb855ea716c076761aca111ef122693865ad5e9099e842aa9651a67ac22b8c337403245b85d0ab6bea5289af62ecb3b23ce5c57f4cf95b9ae7a4522b5160c84cd010c68dcda2b1b4fad2c2352dd9142ba1f06d8bcdb129080e1e0234", 0xa9}, {&(0x7f00000025c0)="1eb05a71b0727dd07f8f87f53e4c6aec1b5729d6f2cfe541ed1fd4c35a230f924381232bf4dff491e724937946611f6916dec367451fcc17ce56d50226b2f89613d20205668c17ca21", 0x49}, {&(0x7f0000002640)="42f64dac1643c799ecc3a23e5366a02743d3bf4efb40f896d0b026e2a9b4fb8e5fdff6a0a1dcf010f2", 0x29}], 0x5, &(0x7f00000026c0)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xeb, 0x3, 0x0, [{@multicast2, 0x2}, {@multicast2, 0x9}, {@private=0xa010100, 0x2}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0x2e, 0x1, 0x4, [{@multicast2, 0x6}, {@private=0xa010100, 0x1}, {@private=0xa010101, 0x7f}, {@rand_addr=0x64010102, 0x3ff}, {@empty, 0x9}, {@broadcast, 0x7}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x2, [0x20, 0x5, 0x100]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="3a1e816cdf5cf26f48a5d60851496408187ff6c603b7253b297b94558d588e98beeeab54aaa92f2351882cf96e0feaa648aaf2df0d24ac14cf6508e4dd20b42d382a3a32acbc16b8f3b8826e0d0ecdc58bd336052d33f3f1a2298956b68bf5e154c59298de429cb527d1fbbace4157643c8c7d61267a513e9e6739bc0ffcefe6e2711cce63e8d47db980d31526c22bd6b8f749593701cd3d000455da401d0c6a018676626fe8256c10d138e46f", 0xad}, {&(0x7f0000003840)="f49e3cbe9474c03eaf9c37f51adba286e0355040ce642deb0ffdc98e22c935bfb08702ba7f994e1e35dc86bf1296c426ddfb376fe609dfbe6d297c8528f29309bc8943bdf0a0590d2aa5d8876d8161caf2a08bffa1603e0838", 0x59}, {&(0x7f00000038c0)="0227bd49b85ebe04ea82d80e46c018230df5a812371bc86df0a34fb744872dfd4eb430f6ffc1b15db0802b297f6c7f00d7c6fc5eba9feb8f", 0x38}], 0x4, &(0x7f0000003940)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_retopts={{0xc}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x9c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x7c}}, {{&(0x7f00000039c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000003a00)="b57993b63f16e8cf519663891690933d5cfeb8b423d685de5801206e1007569706d4", 0x22}], 0x1, &(0x7f0000003a80)=[@ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x9, [{@multicast2, 0x1}, {@rand_addr=0x64010101, 0x14000000}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x2b, 0x0, [{0x1, 0xf, "71091ddecd41193ce58a9e76b9"}, {0x5, 0x4, "24dd"}, {0x5, 0x2}, {0x7, 0x5, "920bdd"}, {0x5, 0xb, "d33fe19ff086635ea0"}]}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x29}}], 0xb4}}, {{0x0, 0x0, &(0x7f0000003f00), 0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="0d00000000000000010000000100000010000000000000000100000004000000800000000000000007000000861100000002000bfbb38d76ec41442dfd442cd851ac1e010100000005ac1414aa00000006e0000001000000020000000000000006ac1414aa000000028927b0ac1414aaac1414bbac1414aa7f000001ac1e0101e0000001ac1414bbac1414bbffffffff890749ffffffff890754ac1414bb00001000000000000000010000006d050000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020acf0000007a14f7e9"], 0xc8}}], 0x7, 0x64048810) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlinkprop={0xf8, 0x6c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3020, 0x4120}, [@IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6c2180ced937e5dcf270e8816b22d9bd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4ee8c9ca9211666ee1c112e992fdf944"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ac0c1fcf1ecd7dc57358e67f4f53163a"}, @IFLA_PORT_PROFILE={0x7, 0x2, ',(\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda398f08049cbcf66ee571c8e8f725e"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a271be65ca6a7099ee97a347812f3f4c"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\\%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "54e43344f7a8f37240edbdb6d52aeb5d"}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}, @IFLA_NET_NS_FD={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r5, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)) (async) socket(0x200000100000011, 0x3, 0x0) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) (async) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004040)=[{{&(0x7f0000000240)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="e8af1870e102ebfd4ee3d4bcc39230ee6b74b79b5671d026693d9970a296d56ccb24b25ab5e8993761c53b14f5d44121dfffe1effdde679062c35890f9457f81d6c9", 0x42}], 0x1}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="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", 0x1000}], 0x2}}, {{&(0x7f0000002380)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000023c0), 0x0, &(0x7f0000002400)=[@ip_pktinfo={{0x18, 0x0, 0x8, {r2, @loopback, @empty}}}], 0x18}}, {{&(0x7f0000002440)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002680)=[{&(0x7f0000002480)="de3816a06fbc1051d05a8bd4cbc3ed9cce571a08c06d9c26f7bd", 0x1a}, {&(0x7f00000024c0)="2b998e0f1ca8f25d819a1e1bada7ff2b514fb8f0a40b9299f3122d450c7bc35386a16ac15824b41db6d9233d1b70f648b82e7f4d5dfadab6efa1a89227", 0x3d}, {&(0x7f0000002500)="2a24e95ad7775d67e8a0a118bff07b3e84a8f83db7d034a30a750f5154dda1f04809c3b68ca7e192fe2fdede846ab28e1335bd473211c73301aa31e0a043d81e2a87a342274822f525d44abf5adb855ea716c076761aca111ef122693865ad5e9099e842aa9651a67ac22b8c337403245b85d0ab6bea5289af62ecb3b23ce5c57f4cf95b9ae7a4522b5160c84cd010c68dcda2b1b4fad2c2352dd9142ba1f06d8bcdb129080e1e0234", 0xa9}, {&(0x7f00000025c0)="1eb05a71b0727dd07f8f87f53e4c6aec1b5729d6f2cfe541ed1fd4c35a230f924381232bf4dff491e724937946611f6916dec367451fcc17ce56d50226b2f89613d20205668c17ca21", 0x49}, {&(0x7f0000002640)="42f64dac1643c799ecc3a23e5366a02743d3bf4efb40f896d0b026e2a9b4fb8e5fdff6a0a1dcf010f2", 0x29}], 0x5, &(0x7f00000026c0)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xeb, 0x3, 0x0, [{@multicast2, 0x2}, {@multicast2, 0x9}, {@private=0xa010100, 0x2}, {@local, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010101, 0x7}]}, @timestamp_addr={0x44, 0x34, 0x2e, 0x1, 0x4, [{@multicast2, 0x6}, {@private=0xa010100, 0x1}, {@private=0xa010101, 0x7f}, {@rand_addr=0x64010102, 0x3ff}, {@empty, 0x9}, {@broadcast, 0x7}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x34, 0x0, 0x2, [0x20, 0x5, 0x100]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000003780)="3a1e816cdf5cf26f48a5d60851496408187ff6c603b7253b297b94558d588e98beeeab54aaa92f2351882cf96e0feaa648aaf2df0d24ac14cf6508e4dd20b42d382a3a32acbc16b8f3b8826e0d0ecdc58bd336052d33f3f1a2298956b68bf5e154c59298de429cb527d1fbbace4157643c8c7d61267a513e9e6739bc0ffcefe6e2711cce63e8d47db980d31526c22bd6b8f749593701cd3d000455da401d0c6a018676626fe8256c10d138e46f", 0xad}, {&(0x7f0000003840)="f49e3cbe9474c03eaf9c37f51adba286e0355040ce642deb0ffdc98e22c935bfb08702ba7f994e1e35dc86bf1296c426ddfb376fe609dfbe6d297c8528f29309bc8943bdf0a0590d2aa5d8876d8161caf2a08bffa1603e0838", 0x59}, {&(0x7f00000038c0)="0227bd49b85ebe04ea82d80e46c018230df5a812371bc86df0a34fb744872dfd4eb430f6ffc1b15db0802b297f6c7f00d7c6fc5eba9feb8f", 0x38}], 0x4, &(0x7f0000003940)=[@ip_ttl={{0x10, 0x0, 0x2, 0x2}}, @ip_retopts={{0xc}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x9c, [@multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, @local, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x40}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x7c}}, {{&(0x7f00000039c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000003a40)=[{&(0x7f0000003a00)="b57993b63f16e8cf519663891690933d5cfeb8b423d685de5801206e1007569706d4", 0x22}], 0x1, &(0x7f0000003a80)=[@ip_ttl={{0x10, 0x0, 0x2, 0x5}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x54, 0x1, 0x9, [{@multicast2, 0x1}, {@rand_addr=0x64010101, 0x14000000}, {@multicast2, 0x3}]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x2b, 0x0, [{0x1, 0xf, "71091ddecd41193ce58a9e76b9"}, {0x5, 0x4, "24dd"}, {0x5, 0x2}, {0x7, 0x5, "920bdd"}, {0x5, 0xb, "d33fe19ff086635ea0"}]}, @noop]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x7fff}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0x3f}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x29}}], 0xb4}}, {{0x0, 0x0, &(0x7f0000003f00), 0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="0d00000000000000010000000100000010000000000000000100000004000000800000000000000007000000861100000002000bfbb38d76ec41442dfd442cd851ac1e010100000005ac1414aa00000006e0000001000000020000000000000006ac1414aa000000028927b0ac1414aaac1414bbac1414aa7f000001ac1e0101e0000001ac1414bbac1414bbffffffff890749ffffffff890754ac1414bb00001000000000000000010000006d050000180000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000020acf0000007a14f7e9"], 0xc8}}], 0x7, 0x64048810) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r3) (async) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlinkprop={0xf8, 0x6c, 0x2, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x3020, 0x4120}, [@IFLA_VF_PORTS={0xc8, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0x6c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6c2180ced937e5dcf270e8816b22d9bd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4ee8c9ca9211666ee1c112e992fdf944"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ac0c1fcf1ecd7dc57358e67f4f53163a"}, @IFLA_PORT_PROFILE={0x7, 0x2, ',(\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "bda398f08049cbcf66ee571c8e8f725e"}, @IFLA_PORT_PROFILE={0xd, 0x2, '/dev/kvm\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "a271be65ca6a7099ee97a347812f3f4c"}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '\\%\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "54e43344f7a8f37240edbdb6d52aeb5d"}]}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x2}, @IFLA_NET_NS_FD={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40041) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r5, r7) (async) 14:12:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 32) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x59, @mcast2, 0x3}, 0x1c) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="9e000000"}) 14:12:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r5, 0x96f923cbb340d65d, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x22004000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:21 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x700, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:21 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 2) 14:12:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r5, 0x96f923cbb340d65d, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x22004000) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3422.736166][T12490] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x6b, 0x402140) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="755a0498fb5e64035c7d3746e86902d3643e253b52682e35bf126212c32c4d3e9d9650ba3d842062592ab50b4a02033ad9a74af9829e40bbf33963ed183e63b20d6b95f2b1f15d10e555baa94cd4f969b49f61ce155007f01844efcee07f330f4a2c3411ea153a9441eb7ead68ff4cc53c4e59af485b20cf12b97970819fa3a55ff6b236980d08db64c528f7494d5e90b2d198758352ef33cd79b66cc8d29b6f923a3a1803165b2a959e04ca780966839d7281", 0xb3, 0x0}) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x8, {0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3571f9025eb8061cea01def1a9db290de2fb31b06b07574690a0c9f6e4129273"}}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f00000003c0)={r7, 0x20005, 0xe17c, 0x6, 0x1, [], [0x7, 0x3, 0x40, 0x1], [0x9, 0xfffffff8, 0x3f, 0x8], [0x7f7, 0x2, 0x5, 0x8]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r3, r4, 0x0], 0x3, 0x180000}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)={0x0, 0x9, 0x0, &(0x7f00000000c0)=0x8}) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r11, 0x4040ae72, &(0x7f0000000000)={0xf9cddc00, 0x7f, 0x3, 0x3, 0x9}) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) dup2(r0, r10) 14:12:21 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x30, r5, 0x96f923cbb340d65d, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x1}}}}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x22004000) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3422.941532][T12490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3423.078034][T12508] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:22 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 14:12:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0x1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x440c0}, 0x1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x6b, 0x402140) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="755a0498fb5e64035c7d3746e86902d3643e253b52682e35bf126212c32c4d3e9d9650ba3d842062592ab50b4a02033ad9a74af9829e40bbf33963ed183e63b20d6b95f2b1f15d10e555baa94cd4f969b49f61ce155007f01844efcee07f330f4a2c3411ea153a9441eb7ead68ff4cc53c4e59af485b20cf12b97970819fa3a55ff6b236980d08db64c528f7494d5e90b2d198758352ef33cd79b66cc8d29b6f923a3a1803165b2a959e04ca780966839d7281", 0xb3, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x8, {0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3571f9025eb8061cea01def1a9db290de2fb31b06b07574690a0c9f6e4129273"}}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f00000003c0)={r7, 0x20005, 0xe17c, 0x6, 0x1, [], [0x7, 0x3, 0x40, 0x1], [0x9, 0xfffffff8, 0x3f, 0x8], [0x7f7, 0x2, 0x5, 0x8]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r3, r4, 0x0], 0x3, 0x180000}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (async) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)={0x0, 0x9, 0x0, &(0x7f00000000c0)=0x8}) (async) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r11, 0x4040ae72, &(0x7f0000000000)={0xf9cddc00, 0x7f, 0x3, 0x3, 0x9}) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async) dup2(r0, r10) 14:12:22 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 3) [ 3423.713546][T12529] FAULT_INJECTION: forcing a failure. [ 3423.713546][T12529] name fail_usercopy, interval 1, probability 0, space 0, times 0 14:12:22 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="076c6652794635dcd80b0df005bb360b6fcfcc34949edc68d3b297bff31b34368d7f6092613ac40b3848d4793349d897f17575ac980608761358ba10a0b82cfc08d1f407f71d9c129d7f9002136f34caa6f67a6b093834d4e1a5519dc90ae44ea6cb000000000000000096e9fc8b5f97fd74a6becae8cf3726e771130f00"/137], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1503502faeb3b76ce36b000000000000000000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x108a, 0x1}) [ 3423.848757][T12529] CPU: 0 PID: 12529 Comm: syz-executor.2 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 3423.858870][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3423.868924][T12529] Call Trace: [ 3423.872202][T12529] [ 3423.875144][T12529] dump_stack_lvl+0x125/0x1b0 [ 3423.879834][T12529] should_fail_ex+0x496/0x5b0 [ 3423.884545][T12529] _copy_from_user+0x30/0xf0 [ 3423.889141][T12529] kstrtouint_from_user+0xd7/0x1b0 [ 3423.894260][T12529] ? kstrtouint+0x130/0x130 [ 3423.898774][T12529] ? 0xffffffff81000000 [ 3423.902922][T12529] ? lock_acquire+0x464/0x520 [ 3423.907602][T12529] ? lock_sync+0x190/0x190 [ 3423.912017][T12529] proc_fail_nth_write+0x84/0x260 [ 3423.917065][T12529] ? proc_task_getattr+0x230/0x230 [ 3423.922197][T12529] ? preempt_count_sub+0x160/0x160 [ 3423.927328][T12529] vfs_write+0x2a4/0xdf0 [ 3423.931578][T12529] ? proc_task_getattr+0x230/0x230 [ 3423.936696][T12529] ? kernel_write+0x6c0/0x6c0 [ 3423.941379][T12529] ? mutex_trylock+0x130/0x130 [ 3423.946151][T12529] ? __fget_files+0x256/0x400 [ 3423.950839][T12529] ksys_write+0x12f/0x250 [ 3423.955182][T12529] ? __ia32_sys_read+0xb0/0xb0 [ 3423.959946][T12529] ? rcu_is_watching+0x12/0xb0 [ 3423.964713][T12529] __do_fast_syscall_32+0x79/0x110 [ 3423.969824][T12529] do_fast_syscall_32+0x33/0x70 [ 3423.974674][T12529] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 3423.981010][T12529] RIP: 0023:0xf7f9a579 [ 3423.985074][T12529] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3424.004682][T12529] RSP: 002b:00000000f7f745e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 3424.013116][T12529] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7f74670 [ 3424.021081][T12529] RDX: 0000000000000001 RSI: 00000000f7354ff4 RDI: 0000000000000000 [ 3424.029045][T12529] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3424.037007][T12529] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3424.046104][T12529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3424.054079][T12529] [ 3424.057184][ C0] vkms_vblank_simulate: vblank timer overrun 14:12:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x6b, 0x402140) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000240)="755a0498fb5e64035c7d3746e86902d3643e253b52682e35bf126212c32c4d3e9d9650ba3d842062592ab50b4a02033ad9a74af9829e40bbf33963ed183e63b20d6b95f2b1f15d10e555baa94cd4f969b49f61ce155007f01844efcee07f330f4a2c3411ea153a9441eb7ead68ff4cc53c4e59af485b20cf12b97970819fa3a55ff6b236980d08db64c528f7494d5e90b2d198758352ef33cd79b66cc8d29b6f923a3a1803165b2a959e04ca780966839d7281", 0xb3, 0x0}) (async) r5 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r6, 0x0}) r8 = syz_open_dev$dri(&(0x7f00000002c0), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x8, {0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "3571f9025eb8061cea01def1a9db290de2fb31b06b07574690a0c9f6e4129273"}}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06464ce, &(0x7f00000003c0)={r7, 0x20005, 0xe17c, 0x6, 0x1, [], [0x7, 0x3, 0x40, 0x1], [0x9, 0xfffffff8, 0x3f, 0x8], [0x7f7, 0x2, 0x5, 0x8]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r3, r4, 0x0], 0x3, 0x180000}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (async, rerun: 32) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f0000000100)={0x0, 0x9, 0x0, &(0x7f00000000c0)=0x8}) (rerun: 32) r11 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r11, 0x4040ae72, &(0x7f0000000000)={0xf9cddc00, 0x7f, 0x3, 0x3, 0x9}) (async) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x400000, 0x0) (async) dup2(r0, r10) 14:12:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="076c6652794635dcd80b0df005bb360b6fcfcc34949edc68d3b297bff31b34368d7f6092613ac40b3848d4793349d897f17575ac980608761358ba10a0b82cfc08d1f407f71d9c129d7f9002136f34caa6f67a6b093834d4e1a5519dc90ae44ea6cb000000000000000096e9fc8b5f97fd74a6becae8cf3726e771130f00"/137], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1503502faeb3b76ce36b000000000000000000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x108a, 0x1}) 14:12:23 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040), 0x0, 0x0) 14:12:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000200)='./binderfs/custom0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="076c6652794635dcd80b0df005bb360b6fcfcc34949edc68d3b297bff31b34368d7f6092613ac40b3848d4793349d897f17575ac980608761358ba10a0b82cfc08d1f407f71d9c129d7f9002136f34caa6f67a6b093834d4e1a5519dc90ae44ea6cb000000000000000096e9fc8b5f97fd74a6becae8cf3726e771130f00"/137], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1503502faeb3b76ce36b000000000000000000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x108a, 0x1}) 14:12:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6558}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:23 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/35, 0x23, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}}, @release, @acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x25}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x1c, 0x34}}}], 0x53, 0x0, &(0x7f0000000340)="9676411a0c1e474e3e1b7bf0d622d3bc5c36ee525e99c142e27cc4a68fba518caa9f47ab15a5589d03f092441ae431a38febe56eccedb6dbfb8c00e7fb2e849c316e681028dcd6c1a167f7146c11585c91cc1f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/35, 0x23, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}}, @release, @acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x25}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x1c, 0x34}}}], 0x53, 0x0, &(0x7f0000000340)="9676411a0c1e474e3e1b7bf0d622d3bc5c36ee525e99c142e27cc4a68fba518caa9f47ab15a5589d03f092441ae431a38febe56eccedb6dbfb8c00e7fb2e849c316e681028dcd6c1a167f7146c11585c91cc1f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/35, 0x23, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}}, @release, @acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x25}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x1c, 0x34}}}], 0x53, 0x0, &(0x7f0000000340)="9676411a0c1e474e3e1b7bf0d622d3bc5c36ee525e99c142e27cc4a68fba518caa9f47ab15a5589d03f092441ae431a38febe56eccedb6dbfb8c00e7fb2e849c316e681028dcd6c1a167f7146c11585c91cc1f"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) [ 3424.737946][T12558] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:23 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x800, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:23 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r2 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = dup(r5) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x2100) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xffffffffffffffff, 0x8d, 0x3, @scatter={0x6, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000001580)=""/169, 0xa9}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/214, 0xd6}]}, &(0x7f0000000240)="4a9e51f71492d2de919e09341321caf044aceb6966fb89e57ec03946519d7809e5c31eb6c37c76d669597be9cde46a517a3c547943c76c851a89c1c4f09170c425e93b6efc5923e7e13f4378f823cc18f3dae1504cab56000b1a190151df7af6e181a945d6c46105475eb3d234a505e3b0c40204acc85743d3c971726e44d62261b59d1d06f937cba2180b9d72", &(0x7f0000000300)=""/138, 0x40, 0x4, 0x2, &(0x7f00000003c0)}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xa) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) poll(&(0x7f00000000c0)=[{r2, 0x42}, {0xffffffffffffffff, 0x1}, {r3, 0x280}, {0xffffffffffffffff, 0x40}, {r8, 0x9000}, {0xffffffffffffffff, 0xa000}, {0xffffffffffffffff, 0x8402}, {r10, 0x6}], 0x8, 0x4) dup2(0xffffffffffffffff, r1) 14:12:23 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/35, 0x23, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}}, @release, @acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x25}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x1c, 0x34}}}], 0x53, 0x0, &(0x7f0000000340)="9676411a0c1e474e3e1b7bf0d622d3bc5c36ee525e99c142e27cc4a68fba518caa9f47ab15a5589d03f092441ae431a38febe56eccedb6dbfb8c00e7fb2e849c316e681028dcd6c1a167f7146c11585c91cc1f"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xb8, 0x0, &(0x7f0000000280)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/35, 0x23, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x1, 0x2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}}, @release, @acquire_done={0x40106309, 0x1}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x2, 0x2, 0x25}, @flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/4096, 0x1000, 0x1, 0x2c}}, &(0x7f0000000240)={0x0, 0x1c, 0x34}}}], 0x53, 0x0, &(0x7f0000000340)="9676411a0c1e474e3e1b7bf0d622d3bc5c36ee525e99c142e27cc4a68fba518caa9f47ab15a5589d03f092441ae431a38febe56eccedb6dbfb8c00e7fb2e849c316e681028dcd6c1a167f7146c11585c91cc1f"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:24 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r2 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = dup(r5) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) (async) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x2100) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xffffffffffffffff, 0x8d, 0x3, @scatter={0x6, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000001580)=""/169, 0xa9}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/214, 0xd6}]}, &(0x7f0000000240)="4a9e51f71492d2de919e09341321caf044aceb6966fb89e57ec03946519d7809e5c31eb6c37c76d669597be9cde46a517a3c547943c76c851a89c1c4f09170c425e93b6efc5923e7e13f4378f823cc18f3dae1504cab56000b1a190151df7af6e181a945d6c46105475eb3d234a505e3b0c40204acc85743d3c971726e44d62261b59d1d06f937cba2180b9d72", &(0x7f0000000300)=""/138, 0x40, 0x4, 0x2, &(0x7f00000003c0)}) (async) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xa) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) (async) poll(&(0x7f00000000c0)=[{r2, 0x42}, {0xffffffffffffffff, 0x1}, {r3, 0x280}, {0xffffffffffffffff, 0x40}, {r8, 0x9000}, {0xffffffffffffffff, 0xa000}, {0xffffffffffffffff, 0x8402}, {r10, 0x6}], 0x8, 0x4) dup2(0xffffffffffffffff, r1) [ 3425.154658][T12575] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x3}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x6, 0x2, 0x1f}, @ptr={0x70742a85, 0x7, &(0x7f0000000140)=""/179, 0xb3, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}], 0x1000, 0x0, &(0x7f0000000740)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:24 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (async) r2 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = dup(r6) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async) r8 = dup(r5) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) (async) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x2100) (async) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000400)={0x53, 0xffffffffffffffff, 0x8d, 0x3, @scatter={0x6, 0x0, &(0x7f0000001800)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/135, 0x87}, {&(0x7f0000001580)=""/169, 0xa9}, {&(0x7f0000001640)=""/129, 0x81}, {&(0x7f0000001700)=""/214, 0xd6}]}, &(0x7f0000000240)="4a9e51f71492d2de919e09341321caf044aceb6966fb89e57ec03946519d7809e5c31eb6c37c76d669597be9cde46a517a3c547943c76c851a89c1c4f09170c425e93b6efc5923e7e13f4378f823cc18f3dae1504cab56000b1a190151df7af6e181a945d6c46105475eb3d234a505e3b0c40204acc85743d3c971726e44d62261b59d1d06f937cba2180b9d72", &(0x7f0000000300)=""/138, 0x40, 0x4, 0x2, &(0x7f00000003c0)}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0xa) (async) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) (async) poll(&(0x7f00000000c0)=[{r2, 0x42}, {0xffffffffffffffff, 0x1}, {r3, 0x280}, {0xffffffffffffffff, 0x40}, {r8, 0x9000}, {0xffffffffffffffff, 0xa000}, {0xffffffffffffffff, 0x8402}, {r10, 0x6}], 0x8, 0x4) dup2(0xffffffffffffffff, r1) 14:12:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x3}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x6, 0x2, 0x1f}, @ptr={0x70742a85, 0x7, &(0x7f0000000140)=""/179, 0xb3, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}], 0x1000, 0x0, &(0x7f0000000740)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3425.374079][T12575] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x0, r4}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = dup(0xffffffffffffffff) bind$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000240)={{0x2, 0x0, 0x80, {0x5000, 0x4000}}, "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", "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"}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r1}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000002340)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000022c0)={[{0x9, 0x3f, 0x9, 0xd6, 0x2, 0x0, 0x2, 0x0, 0x9, 0x5, 0x81, 0x0, 0x4c8b}, {0xffffff01, 0xf001, 0x7, 0xa2, 0x0, 0x80, 0x2, 0x6, 0x20, 0xfe, 0x6, 0x1, 0x20}, {0x3, 0x5e, 0x1, 0x81, 0x1, 0x1, 0x3, 0x6, 0x3f, 0x4, 0x8, 0x5, 0x1}], 0x2d}) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b8bde2cc8c66efbafc0cb09aeef20fc2cb99dbe3660f38806c79baf80c66b834f5ec8166efbafc0c66ed0f2122260f01cb6566dbe0b847008ed867e0fa", 0x41}], 0x1, 0x2, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, @cr4], 0x2) dup2(r0, r2) 14:12:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x50, 0x0, &(0x7f0000000240)=[@acquire={0x40046305, 0x3}, @register_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @fda={0x66646185, 0x6, 0x2, 0x1f}, @ptr={0x70742a85, 0x7, &(0x7f0000000140)=""/179, 0xb3, 0x1, 0x1e}}, &(0x7f0000000200)={0x0, 0x18, 0x34}}}], 0x1000, 0x0, &(0x7f0000000740)="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"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x1, 0x9, [{r2, 0x0, 0x1000, 0xfffffffffffff000}, {r2, 0x0, 0x0, 0x1000000000000}, {r2, 0x0, 0x1000, 0xfffff000}, {r2, 0x0, 0x4000, 0x1000}, {r2, 0x0, 0x1000000000000, 0x8000}, {r2, 0x0, 0xfffffffffffff000, 0x1000000}, {r2, 0x0, 0x1000, 0x2000}, {r2, 0x0, 0xfffffffff0000000, 0xf3ff59b794ed9f21}, {r2, 0x0, 0x8000, 0x10000}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)=0x1) 14:12:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x1, 0x9, [{r2, 0x0, 0x1000, 0xfffffffffffff000}, {r2, 0x0, 0x0, 0x1000000000000}, {r2, 0x0, 0x1000, 0xfffff000}, {r2, 0x0, 0x4000, 0x1000}, {r2, 0x0, 0x1000000000000, 0x8000}, {r2, 0x0, 0xfffffffffffff000, 0x1000000}, {r2, 0x0, 0x1000, 0x2000}, {r2, 0x0, 0xfffffffff0000000, 0xf3ff59b794ed9f21}, {r2, 0x0, 0x8000, 0x10000}]}) (async) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x1, 0x9, [{r2, 0x0, 0x1000, 0xfffffffffffff000}, {r2, 0x0, 0x0, 0x1000000000000}, {r2, 0x0, 0x1000, 0xfffff000}, {r2, 0x0, 0x4000, 0x1000}, {r2, 0x0, 0x1000000000000, 0x8000}, {r2, 0x0, 0xfffffffffffff000, 0x1000000}, {r2, 0x0, 0x1000, 0x2000}, {r2, 0x0, 0xfffffffff0000000, 0xf3ff59b794ed9f21}, {r2, 0x0, 0x8000, 0x10000}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)=0x1) 14:12:24 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x1, 0x9, [{r2, 0x0, 0x1000, 0xfffffffffffff000}, {r2, 0x0, 0x0, 0x1000000000000}, {r2, 0x0, 0x1000, 0xfffff000}, {r2, 0x0, 0x4000, 0x1000}, {r2, 0x0, 0x1000000000000, 0x8000}, {r2, 0x0, 0xfffffffffffff000, 0x1000000}, {r2, 0x0, 0x1000, 0x2000}, {r2, 0x0, 0xfffffffff0000000, 0xf3ff59b794ed9f21}, {r2, 0x0, 0x8000, 0x10000}]}) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000140)={0x1, 0x9, [{r2, 0x0, 0x1000, 0xfffffffffffff000}, {r2, 0x0, 0x0, 0x1000000000000}, {r2, 0x0, 0x1000, 0xfffff000}, {r2, 0x0, 0x4000, 0x1000}, {r2, 0x0, 0x1000000000000, 0x8000}, {r2, 0x0, 0xfffffffffffff000, 0x1000000}, {r2, 0x0, 0x1000, 0x2000}, {r2, 0x0, 0xfffffffff0000000, 0xf3ff59b794ed9f21}, {r2, 0x0, 0x8000, 0x10000}]}) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000040)=0x1) (async) 14:12:24 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x0], 0x0, 0x0) 14:12:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (async, rerun: 64) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x0, r4}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r6 = dup(0xffffffffffffffff) bind$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000240)={{0x2, 0x0, 0x80, {0x5000, 0x4000}}, "aca0b82251a4a901b22ef8cd1a2230cb2edfb1d8133d67d352ff1656cffdd5cbe5f03da42d0ce3ed51b58ec3f970ac4de9e15e80fdbdfe929ea2d31537e06c41243e255b3d9c11caa061fc8f76b1f9ed6a2aa1b49fc0f8586073421cd1fb9ab23926b3a43aad11471e961466981b4d15a2377e91158831994fa752522e8bd790132df7c9df4c48044738f17cda8a2ca5869b3e3981de64620af730402a510772be46efe38db7ad06fca5750537846d634007864f46b15296edd577e0426ab384fc7f286ca3301b8ba3beaf5ccc4346342c8a257d7fe70f3337a5c54277fc7e5407f077574d9c045fb253359d5e77d40d18636599207807f453ef7618717b5b8f802c4ab76ea9e4141dfd2c66e0cf356f5e1914ee41a2a40dbc37a2502bfa4e6c9b58091a0e89cbd51a9b05c00963d7972f4147856e3233ace2a81f12ce109f76d0ecdca690bdbc5464a70744e0966445f48a3cfbac199dd4e0e3f748d6f542307a8d9e1afae9881a4b0c7a4f5fa052270dc074820936433af062696055a853706e6bdace55a73dc1cb7673df847176fc0485d55a1d329d4953b1f839141f8bc67cb2b61aff6d1b8160a477cde2643ca0cdb8d03b68f3bb7c184c921227c4fa3a9fd3443501c46395c95ef32f1b4dd47f869573367be77060f01689adf16ebdea5092b2111b75191d52ec6d0c16acf609b33ef9e8f62a6fc20aba1d77d1f73aa5f21b18d5d98d45013b306107183088d157ebd62449bf2f7b0a1bc2c344ad7dd786cc638a5cc1b4476d0659b01a471ee78e54f25c2fdd3fe888d02f39c46097dfd14b1b1b3f81c22f19daa039dc59e282d3f146d629d083da38f7d05f26146c11e6adac8e9f561a5002d9b1116b06c1700f2c65b25862bcda196162494d346c37174b65a18fec2394f07f2562d102f63c51ccecd78b5339dc639e8caabff0b39a3a29e012f62efc3eaa4f416eea0d0df5f11d6756dbf8c57cf4a2c149c97d1776c6805c0be8793bda132db22b2e74d99c721e645abd335db33c1cb122bbf3dee8ac7e5f5283c4ebb899e19264381d1344868fcc34f080d82315822c985d1e1eb54fa22287a0a4306b687fc055fb3e5a7bad786a5f862b2432d7b211a371cbb4845180587a54654ad239ba788e078be2aa62ac4ae3716cf5ecec3349d1ac999b25d805ac3ff9333cf23cbe6d8db1986daf4236e43c944675151f8ff211b538e962af1da8b5800ee5a0d8645db12e5c83ca2bfb9ced304463d787a42adc0bba725cc91946743c2337d7751f216bad25cc9c795ed0d3d4c399063c0f91f3737079c6292e737c9547a79d836be36c402436a72576248c2b9402dd21a19817642d3e888290386240631311886ef220ea1ba425373a0366412bb42b3c7d8d08d481e448084cecba01fbf42829affb359331efe26d81d97d85210d3f6a911ba784c3e490f63caacca20b0138c88d500ffc9abeec6e20dd8a7b5c2149b8fb92e71af579f94ff2ae6c23eac0ee91cbe22cf1454b3b1ac4b7d461c5c63ae8c36869fcc475323d15be66588a8947d85a3f607da3a34f63d2eea36a68f647ac5a353e85eb3e5fca5a0cbdcad948b14680970a423d0a404e8542f174af89f0bc9a27a25fac340a978e85f8afe58bd1dee15544242aa101b1bb7575517b0cc0a7a459e6cc44049de7947a105596f2b2e0dd496d4c56f34cb770059d4d1822e09554ca0980ac351d55d105c4e346e405b7d3b3031e259e4eb5e74291c4fc3e2d73ebb83f555653bc709cdb935265c0a4aa62e05f0bcbbe3614f423780e3bd758c7b559ba2547cc290c4d94cfab8160b88fabff06b592b9d6ad5d9385c56888f6db89d6198c1410846ccb2bc604b63634766b26c05bf392eb17b34c6c9f809dfd0a42ed9d1fcf2df7b979173b984d7d5f1c7b28a0871008fcc2094aafe630ae9eca05f29d7e9c59f3f186598e479ad45ec76db0307ddf67ecd835ba93e9ef0b1f63572308d6f7c25bc1a7ff9657be81c3ab34282e2d425696b7e172f664a4d1780427b201dec04f7a075dfb6ea98e6d487e14320a7e3af446d4ccd10f57cbac1242d3effea636b9a26a5f2585ab32b9fa44f206f96604776118f1bf3608471e6caae1afbfbd90816767fb5c7eb5fbd3b44d9557666421f3cc1b4170b056eb6cfdb43c5553cf8491e7648871b9c0b6d85bc3aa2299de5ceff1a030dac064ae5f815a27c36433f41a3b66e6bfd3e8d9791164ceaac134313947be6f316df1b9e273b10474fb42403c9a37046e4e6894a8c6ac067881cf0fb29a7992f79c5da68ce7f03823ac646ca0ff386cd6ecbae869762b1a14ef383d88c713cf10d5eb68e38c595954ca25f6d9b7de87a1dd7daadd9dea4584144e2232dc20797b615b1ef96a86139e25f3a37493ab7547cb80eeecaad2448830a5810fb34cf50065d79fd51aa3b353b8f6bd9abea0e1899be99f7cf292d9de323bb0760728ac519934342275956c9566a59a0f0ef09eea6f1b9318fd4dff26d4e95f923323dd71adf9c1bc7b59a67b24ab68bfda619651c547499e4ddbfeaaa2a9c3d149586925bed1e2966db08eb4a346147944c3a6f5bd0749b416540d2be189d242cf23a87784d02706edfd1d0eff1888eeaae49a0284d3b25e8cd591637fc60076508e5b7c7c893fec6f7c05c19ec89b39bee80e62a21ebd5e1b93f03ed83f1d424e5dccf19b5443de45000234a10349c1f4923f95158b219d5af8801ab0beb7e1f16b2bf3415d1aa7e8dfd8e3a3e47b19ec5637b413aed97d16e6afb42536fc9f379df5242efc2f8db6afc5e206ccfe740139a6844800abfe9c8753e3d0985da973f45a74738af5bfdf49b6e1b529fe0c38ae2843a958b6f8cdaabe9bc2a8fc30c6ef62944e14ed0c1d240001049439d999901e4c1b3b670a3a908cb0fa5f9faf93a732a5a890f35be020cafc50d862653ca97defd0f08adddb60b6871aa8bd75923683dcfe0525b55ef804cde9720b39a9cb7f272d80a4db5483548372210b540aeb554b58703faf13c92be4330458e8dbd900143d32629bb01a9f9fa0fab78dd9efc3cec7517e3fb943565572cc5959a8341d9fda75ce544313aac369d33c918064c4ad87ce6d944e5e6c7b5cf0fa5219f6d97a5bd506e153ef585ab2b39616937f4dd412ba3bc06e4e095b1992d7fbd8a373e2df1765a5b8d1c3b41b4455c688d14a7b6fb1e43858f6db1d09c7711588fa9538f21d6892aa25cdca2fd75bda2cb12a899fc752217ee148e38e661d8fdc3c372d153c0097de61ad30a686a3ed268f918423ba1181adeee344a7b7fa5e507430ce8e480de5edb9fefc38014f6a8ee8fb16230512007347f51d2db5b7cb653020f2f7921d22035e1ed8b649043f5c873d2d21ee3c1f34faff792edbe0e6b6a03c1a92a10e8c8a1173cd8ef6d5a14045febee61fc9d04b3ece42e6b473fc517fe580d510069593c66f38df440f297c51aca170017cbc516021a9dbf1c1e6761b664880392dfa69e0c1ec425d674be1747355049bc2765e59b0f6224dec55ffa1e2f0f3cf1957545f8de29a36d42659a4940f3623f5aba5bb0565b864054959c8676007914e3e31d9108bdcc1a86380b3eed7960dc45072820871afabf1483163653e38784568082d966e1a8b05542dd260662944c9b646a344b3fda4fba527cc14da84cfb9ad0801d1b3dc05606d52aae9a3598308ec2fa39ab326360d8819b62ca46fdafde0aa31e2b8c529e57dbbc8c56e06e49e3a47035f236df0229ecf7bd3586988f977afc0abf9d8cd8a748de946e5ab85fceead540dc4a6f15c124bbd34cfae70fda43002c6e9eba32a0632d45ce386fbc5658d989458aaeb7eb9f5fc78d92114ddd03fa6e394cae746ccd2cb66bfb8c0e940c395c5f5f19a454324e189b08866367291fef850f0dadbc545c270a942710ed29baab400aff48f7d5b76446f84057739bf507f6e38f5f686ad1d75ee2e74269d9c9e556d7cd613c159592e4aac9def183fcadcba2446c284c77f3878f87339b3b71189af00f186def7a0b5407d8fea82870a585ff7526b84767148848b680811a3e41fdb7a4e1ae968e8e3dbc1c116b212fc6eca8b811139394340cb6cc1fc7cc1f215711ee2b9c2b9f3f5dbab067b7d9cf53405aa10dd482d61fff6137a09a765920552b1d22bdbe9beb7d52eb86beaa7ab5146c5f65beafa47d458d5c17070eb261ff39ea26f903653c65375a41ec9c3ab704aa1ae2adb40322999c85e3311cb3e1f1270abcdfc6c0fe6f961c64c7351376253ecc73c8688239f6fd0513681b15f41de0564d72c452a4345b94906a2990ae29445be1e0cce0717b47100c1c999e1f95a60fadc6ca21465f6285c6f907d5e8a97cae421f436cdaf32e66e134d71f0c0ff08109cc126a9702b4712ca8d1345f424e5d517e0838cb0ec63733b903e8c6f10c3fd9cc44cddd14f15daa639ebb470fb9c23b29a9c57bf79e9851288351a6e1d757cca439d9f827843b12a04aa57612ffc2436e6951a591f2075bdc220e0a832aaa5b60415423c84c6cc2812a83646e15812407e85d362115936a59a8e425f777dd37f75a126ec4433d2a11ba1cedee41c841f2b58fbc1cd3813de66cd22cfdd3ac44dfa57138a9321c2d5e3d27638f8dffb1f5be5b3f5917f5eb5f9c85ffb094448d98844bdf24ee0cdf5678478492c822f6a0a00a10dc9407fae943a2d628c7fc377130846e139c94ed000707d76c442a6c7ae3708d41eb6119c332542537c310f2746d5bf7d37981ce1a44b6940b1dae3d6e1839652b29d56e46537c745a31975527256c7fb35f1dbacfae0bdfba806b9844ae1c2cc00c43b7743d74021edd2afe50bf3cba26c16d89d515212d59264380091c2d6177aeb7d64e1163406612183022e874a5bd7ae0af844cc7940a085162a2d765dc6c8eccedecbf6c711c13072fba86669ae23d26fe9b797fc0deaf98e0db8b9e1f258052f4f630db740fcc7d647d91e4ed76dd3b4907b5b022879ee180d7b5b560a9d0d2b693a76d7c9e9cb0bd609199d88234aea485ca51aa5c000a033d4cf1916c70f503ee18da36be8cef1bfa15dc7f5826d5f497140ab78043ba99fb84632e0aa97fd609c3f908fe67010a333bd1d0235e50384ed6a879540436e96b069752e4e89cf9e93048c484516b2101c0bc6dc0cfca4f87e701a5b8a623781207a6e7c6d35b3a545dbda185ba3e226265f47b9f45c33cbf4a262d7ebd1f3a31bd9a2fd88da2a260e421312dda300f9273a33025f8cb60a77260a59ec36396385ba3836bf4ae99b36d13c8a039e21da770a48addca29308c98066c2ade4e20c980026e397a9e4f71ed2061a8367c3d2ab583b5935092f33fabb6fe73d21fdbcdcf3786df7e29176b15c0434d31fa51c22bd98dad06a353d1271bcb922fb0b895cdc7caee15af085d69f059122947f15d4fbbb5d499ab16ce0b06c87886cee1d189d1f942e964cc516940f89b3c889a3f6cbd0c5026c6ce0331277896fe2906b88e7b2af81939afc4d4d6591da881cf6da6e5cc30e1b7e37220b4eb9ca7581bc10be18901d8caa3833abd2a7db4eda4b8a675ca745bc06b416c3519e5a026a905d2f33666f06f966f037f6de09fbf93a79da56da96a5bccf727882c4edc17ae17cbe8de59fb5711c423f6cae726189acba4db66d289bf6e47bf3cde590bd236cbb39d74871171ad7e009a153945dc9ee0063a292fa7047364931a7997fbb6855948170b645b36e11492ec2d008c1242b44274f4f1c02dad6422b9ca5bae949d292808460c79f480134da827ee994f7b4f0c6", "5144a71dd3acf08bb1a138cfb5ed146278ea157997f0694e5eb4c73c66748c68e226c82018bd8978cbd604ff4dd66ed32dd6a6560bdc60547ab99985266fd6fa6bdcf7a267f226927abcf0c5f38423d35f5a60c5c6763687bc352219d8b49bfd7cd51b78df24d7e384ed9291bc47063f421ca2f3a652380e6aa59e4e7b31694b738ae6d178cc36227791aaa3ee09a46365434fd4ffc0c8da9fd196ed439a9ae143aeef8c5d9bf710aae3a92628c923a3db413cc0550b298872e449cb03f3cba5a5e30e7942e18c258801e5c7a3602a6c249656785c43843c7fb48f90c783cf43fbbde6385488ae074125a9e67c5e0e9a069d10a87fb5a043dcc4c0ddda2d60025ba811819b9c3062cba08fb416a923496648637923ee30574f834c910a0f231e91ace4d0e87e2e8a4c1b90bbb5d46b6ff958d824244d91a81de7f8c29728a7d8086be91713c4fe5c6004157601d55131eaf1b397a8f815ba129090eb8150cebe84cb3a10314dffa275d94dbf386ce2314a41ecb08869d7a06c27e45e62824a73ab2250b56b2fc21b9ed62e85012bb2fce56fd833360aa7bf3e6d6b18ffb217c0e29d665a22b88b3d5b5ce25506d4b7278c7ce19b5f047645ebf56d1183d00fdfa98f57ff12f4662bf3034179ff6963d29e0cd4456f21ea881fc37abf1d7df6cf29f408cffb213045b661314d1dad2385b418ff26a402fa1090eedff79ce986a990ea18047564455e674880fab4239f771c32881b22ee318e2cbaa0f257a8a393919d929420bc6debbfa418ce01c154d68da2f61393b987efae785fb80a05f06e4ad09b03c0c9077af1f07a7946f7ef46200a9fc39a91ae935314f4db01a157a275920f86439884c65c4a6046d995b247a89a45d2019b9c5d573d16b334c5d5c4581261046d11e1a27671273134d055774952795b92cb843cd4385b54f5d8261ed9dd123f265c9d227b2f335f9d2385771a43622cd1583f47727e75bb09a1d134fda7f5c1c037e8fa337d872a58890f51fc4c83fe524a02d0d09252bdaa68b4d65c85dd4d12a643611ac96769c8c2e15c1378c8078fc3fcd0174d4e75e8b88f6733a4a55dc29b12a4f33a1508c1c08c61eacdaa6e0f9eedb842b01483ed80c9445b2babcbfcaf14ba8f118143538115c829e716efd7a5f9ec9f4f34e052d104509373da4a9b41c1c914585edb16199ff60b5b781ab8610de33fb2cd55a7a6fa4aee328b3a60cbf47a34e2c90b8524ebbeebd80c327473f0d34aa9dc6b56fcb344f38d6a2e502f25e978e7f8cb87a034cf1d31368651feb9ff8a6f33be5adba85ee3326a8d209128e441eaae5d2a470910108c74ba383c17afb30c1bb4af6be20a425554947ad0fbb521bf3eae28ebd31c75e9587d2a97d7552218dbe9aca2fcbb744c02ee2d1466a1a6fe1853e95d649a4634b91357ba6582cf85e2661ce083c4f979d3eabf1a00572cfaa25449a0e01be31540046138e1fe9a614b98d9d0a036f142cdbd6275cae1bc842913ec505267512f711bece638337e0ad19fc14a513ebc31b6111008ebb04dd19d518d7556b969939a7f4c965251b7f44ffbc59cc230e1235fed7ffebf742bbfac8278461e177c774dae2992592134d5d520b328b77c5b7d6d2defe15fb0776277dd2caad240e7eaa0fde8d81fd462d8a003d0780e7f9fb934f74f5879abf004e87ab64a22c96882f5051fce247bf936c5affe81e97fa31f13b853bc0374f91353f54a62b38aa48827552f172e52f237737274fdb02c2ed7edc58f0c394dc6494a10b9011a460eeea895b9b2513ad902530d2b0f7c3e775874e070f5dce0b202e5808aa1579e085ca6a543ff6273d6a2b5acf61bd4ddc3d9d7003b4a33157b218ba421e9219c8374401f0865469b730e41d47ba126afed2e7d84c1304852fde5749961a3a664b7853946d50cd803fe9c46850a1ddd8a5e0ef05c1b5f3a468cccfd11bb51feadfd8c916f8c6cb701253f429a02418b794328424a5e3e4ce933b51928a2c8f1e164726c45d2e9cefeffab42caaf30fb66b4c2343c3fa9a1342dc1b3b61c6f6f19da17d4ed595d3cb85ebd598f20b09511fcf4bd56d11449595ec2414bd4ea3fd558af52872c448f4d1dd67ea9f1fea7a6180eb678855401a73aea02fb13a9cdce5d655d3fc4490cc3bdfa08a4ec625ffd79787bc826e2969224885f7e54351f8ccaec13ac1c88a48fedcdb794ec6cab9af35cf020763eb483321451dd98ca3749c61b570198139f562d570a37471ea595e985626e346e07ed9a8b612a32e03c6ce4a742d53e26b217d8e04b9079e568a0de8a70f861d66404fda1f09025ea39c0a09f125295fc5dd5a8d764d6e15b88efefca49f4e5574d73854e532fea54a9dca9b4432e309671caf30454da72f407ae131a847d4dbe991cd09cfdd04006ea64fa4f4181d292fb58297dbc7852dfa0503d390553eb18d167770b3fd1d63fc812884aa2e6e82a357e2e34e3f4738c669b52c5dc41698bf407b095b3ab54c43f8e91b80c9f51a429637fdaeed37321286c88915dad983df5fcc8a574beee0f2bc8806e7d9b974b5e8fc8ea375eff3eb4c3acdea4676820fc9ea340c302f79ff74f221bb11f38a491a6bba587c5db49f66521b4e1e60ed26065a07768c4396164b383921b1c2085a8e1f0ed998d3aae1eb4c55887b3ca1b07641abd60d632d18370fc8430b3f7c3493aa7b34de7abf9c7fd9a779f4e9cc912d9f6337b85c002f80b6330ea51592bf2c181c723ced11104960b2639045e78e86faf689eb67e1958be334c61598a26c198b8172207ee1d904872ebab5ce00dd98724268e78ca508d9dddcfa892c0a31af6a7baa5421362b80b3acb94002534146933475d86bd646dca0dbf0aaf2b388af3b2f25f63db4f2bf350c5f54c48f2d9562433900a43e23b02845c7fb60ad4f653ba2135956f832028bc3ec44eafe1a5bc5209350c493f130d72fe65d1abf86d1a7421eab4009e460f5ed9943674394ccb91bea19a6fa81853cb7ff3a52f1a951e60a81b5426995fdd2bff5b42feb618cd69506ceec35a3be9a0d804a43b6eaaf432d2524c43dd6b76cceca5a6f1ac477b4ff890e6b1e2438e19f17938613b1f3f30016bc2a46598e291c59e1ec060198c4de3f255ae0d7ee83d4dfc772a1190c04ffbf8189be6b93749a345c22fee2abe39a9a747f227dd31e7853d41593ee2815e88fd6fd452407d6827c38dea0e16a045faea9097bc3e62c07df9c49797ff086d8822d07ac51380e5913d586dc4545a90b0c39f69c6b426439247c7de444a02d3e1abe3eae333783c8ab06bcfdc3c6e5efaf30cd43795a9725e24ad79e55fd3f135fea998afdb66d34e3fcf5c9fff1daf28cd3e79402cd7c86b78e5db9d9ccba57f9114bc9715a0e5282d8be225175ec3d4660a635261e04ca99af28e5c45e0b8a1ae6c2c781de7c745406dc4380c4e35f5d449ec3a2d8d927d0bdd4b83520221d7be6c2fa7486542fad7870ac2a1bfb698c5a42408181c74ace2bea46941097ae6712c04ccc14340c500c6923175ab7eafd22ae91f56b6bb79573c857829d27287905241ba2578a887d4da0a6b17d9b4da0ebe71cc5ea3ad53791db9dcd0986768c9bba19b534a89f982583d7f06af700c3fa0e9d38446cc46eac77e2e5d0c71b2b8b1bcfa0e2711eeef27d5b7cb6f296159763477811148e51c710ee9d2e428043c076e8d43cf74065f4ae18e4e931a4ebbbc0e057ae826ddfd6b08e793b2100e8ba88ea4347d9dbeb7c1d7b5f3c1fe368ad4f6f89a99fd64de385fd978d180f969d68d847a1d1e11f84ad4331997eaeeadf7ab40858fe52d16eb65315280701faad5e8324a8c6726b47f16974ee4c0c2722d1447fb13e436a007a2a0e00268d2edeb3d84e6441bcfefe174bc36aa59e6d5348640b5621c45693c343d26a87dd0fc1508549522a2602049e8ccf479ca036d413584483e6922bf36162aab48da209cb32309aff0694b71397dd2691d7b59be77c9208391978571ac69ce4055ab6824db86a30acdea12081ab6a9ed96b518faaad89a2cf6ac4f304866b7382af727d02ec974f4ea380b730680248918df1394d3c4adef034d6ecaf6e1e196bc1b3c1e36812186607a63366a2f5c422462d3aef56f42ca770fe485960522b7c7a3aa1a74b72a71d723aed0ae149c47d7cb73053e0d222eec7b43be722f33060bcde99745a786a758de25fc738b654f02a93d5e2315150a12f7df0c901db363f46351d72ec529e8e13c12c2832db9fea4d6cedc513e9f6432eeb6c27d3eba9def4c085201aca3277ca75cb32d75418b5b9e521ae85036e2289fae3e6bcc3bce1650886f9de97de98b3941aac9f9b8ea62e19fc4c1bb3c25239c4c0a15a2bfdce404ec86c3448a63c456984c03dedf79be057d930efadc5ac547414e8e93e07b5f1d466b3b64fd12d47d812a3ab47e90ed0406e542fb2818a23db1282de350bcf081a8ce366e17f779fdcfc70875e79106c95bdd0809056853a7652ab4998d69b4d71a846bf07d6adc65fe0c5b4dd191e128fc214feb383bb9bd401fde97e78070db087a74cb51f2a3f3db8da0007dc6215989a6a54b226fcd36dc90045a1e17601034e6ecc84992a7d0afa0e4451074612aee26ce275fc3e6461b4a225ca68b7e9e40a46ad5b8bc8344e60096b0585287ddf900fe4231330daabe48185fc8c2fb7a4828021b9ac2494f542e54021a1f8fd9c2b583e5e491cec1d9494c69d9ba5234ce8b0245a28041f38c2d7ed2d96a35cbd9210c03faec800ac0d580410488f78e02939c6390fffd26678a375b875945628b87a0c0ad3c7cf73cb740645fc76b0da1b9084caa1882edafeba6ff4d6d384a3f209756f2a98fff6e7c31d6b63d3c6fee3763ac13d35265b07fe15d86231ecdd1c55d051c73162b9547721386fb8908f92beac3e02374c43047a00321005f8370dc3e21ba544012bdd16e82963ae25d78bf27c7d282e9306c47c0619c437a33bf2a552f93c0a28c5645a606fdd8170c4562def89837e69416c95fbea37d57f2a37eb28d03a538c603592fcab6631f71753fa785e98a1133a631d37eafca6b39d86c3e1726adba295be44b08660e83e1b0f17aadcdc5cde0835c7606687e91201120c9a1aad56ef7b6096b396fc8b63e1edbcdb02b7794ddbded4bc2cd5f264aa9ebe3d246b89fab64d35773299eaaced128701eaa3975bda106b0f84ec1a80bd263754472ceb5cef7c58d65dc317225d0026422bab7ff274b725b10507443ba02fc314006d91b94b43e12c1d9e64164380d2a5b18f0f19755d0fbf1a3740090ed3c2612dc826026ed5d2bf0bf12810751a74b5619345110d9c64756139c033d3a81c82d2f25294e5b20e04dca501a94b82a1ad2997026a198b2937797de00142d944e163451f427b4f460473e13595f6d1849037fa7981354a359ad90d7bda8171b8bcaf5b6c0edc4ab8cf2960fdba01fc53588aacd7e69ca402a5c7cc73971077e18da70b30ce92ba6b91c92e61cd2c57bf5825e2d1955f84db9c38bf7a6b03e1c1dffe338215225d64d1384c9da6f72ab077e958f08f3dab9d67192b9776c83550e55af78fa4e06ee708ab3a0f67796d5a817c5b3c141fb769767cf12fc4b46dd065e0f3bc1c0fdccb35f994703454e9e60c13f03ff821feb999a1b1e49ccecd8cdd89894e82e4f96355bb80f82a249f688d02a5e700f11935d785ef85cc127e9fd3dffa833c08d0a9cfd93500bf1749e2edb01828ad9ce3c7e6771e91deb5a16303646b09bbce80bc51a7321e6fa4017582e3aa916"}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r1}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000002340)) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000022c0)={[{0x9, 0x3f, 0x9, 0xd6, 0x2, 0x0, 0x2, 0x0, 0x9, 0x5, 0x81, 0x0, 0x4c8b}, {0xffffff01, 0xf001, 0x7, 0xa2, 0x0, 0x80, 0x2, 0x6, 0x20, 0xfe, 0x6, 0x1, 0x20}, {0x3, 0x5e, 0x1, 0x81, 0x1, 0x1, 0x3, 0x6, 0x3f, 0x4, 0x8, 0x5, 0x1}], 0x2d}) (async) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b8bde2cc8c66efbafc0cb09aeef20fc2cb99dbe3660f38806c79baf80c66b834f5ec8166efbafc0c66ed0f2122260f01cb6566dbe0b847008ed867e0fa", 0x41}], 0x1, 0x2, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, @cr4], 0x2) dup2(r0, r2) 14:12:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6800}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) shutdown(r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) r5 = openat$urandom(0xffffff9c, &(0x7f0000000240), 0x80001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xcc, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/88, 0x58, 0x2, 0x12}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @enter_looper, @enter_looper, @acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/67, 0x43, 0x1, 0x30}}, &(0x7f00000003c0)={0x0, 0x18, 0x34}}}, @increfs={0x40046304, 0x1}, @acquire, @release={0x40046306, 0x3}], 0xae, 0x0, &(0x7f0000000840)="c51ac59c293a424646df2e928f947b4d152962b7a10b22f5967a10e57a53a59b370265d1421b1e792cf6d362d2b4efcad887865a3dc220176d2fadd7f3908792e3275d0c393a8a27cae1037b1562720aa2d7c1ce9c1890980f247e4d5c7695d253087b88b34dc0d8446fd471cd0d8158becc7764d84437b20ee919fdb9e623c30623f30ee7356e5fd534f8879c8755cc95710c810263baf1429b449cd8a1e4e1abfe41d15cf62164738e3ad996c2"}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0xffffffff, r2, 0x80000}) r7 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000140), 0x800) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000180)={0x8, 0x4, 0x5, 0x0, 0x0, [{{r0}, 0x20}, {{r6}, 0x3}, {{r0}, 0x6}, {{}, 0x1000}, {{r7}, 0x8000000000000001}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:25 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x2], 0x0, 0x0) 14:12:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) (async) shutdown(r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) (async) r5 = openat$urandom(0xffffff9c, &(0x7f0000000240), 0x80001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xcc, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/88, 0x58, 0x2, 0x12}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @enter_looper, @enter_looper, @acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/67, 0x43, 0x1, 0x30}}, &(0x7f00000003c0)={0x0, 0x18, 0x34}}}, @increfs={0x40046304, 0x1}, @acquire, @release={0x40046306, 0x3}], 0xae, 0x0, &(0x7f0000000840)="c51ac59c293a424646df2e928f947b4d152962b7a10b22f5967a10e57a53a59b370265d1421b1e792cf6d362d2b4efcad887865a3dc220176d2fadd7f3908792e3275d0c393a8a27cae1037b1562720aa2d7c1ce9c1890980f247e4d5c7695d253087b88b34dc0d8446fd471cd0d8158becc7764d84437b20ee919fdb9e623c30623f30ee7356e5fd534f8879c8755cc95710c810263baf1429b449cd8a1e4e1abfe41d15cf62164738e3ad996c2"}) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0xffffffff, r2, 0x80000}) (async, rerun: 64) r7 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000140), 0x800) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000180)={0x8, 0x4, 0x5, 0x0, 0x0, [{{r0}, 0x20}, {{r6}, 0x3}, {{r0}, 0x6}, {{}, 0x1000}, {{r7}, 0x8000000000000001}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3426.427958][T12623] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) (async) shutdown(r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) (async) r5 = openat$urandom(0xffffff9c, &(0x7f0000000240), 0x80001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xcc, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/88, 0x58, 0x2, 0x12}, @flat=@weak_binder={0x77622a85, 0x100a, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @enter_looper, @enter_looper, @acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/67, 0x43, 0x1, 0x30}}, &(0x7f00000003c0)={0x0, 0x18, 0x34}}}, @increfs={0x40046304, 0x1}, @acquire, @release={0x40046306, 0x3}], 0xae, 0x0, &(0x7f0000000840)="c51ac59c293a424646df2e928f947b4d152962b7a10b22f5967a10e57a53a59b370265d1421b1e792cf6d362d2b4efcad887865a3dc220176d2fadd7f3908792e3275d0c393a8a27cae1037b1562720aa2d7c1ce9c1890980f247e4d5c7695d253087b88b34dc0d8446fd471cd0d8158becc7764d84437b20ee919fdb9e623c30623f30ee7356e5fd534f8879c8755cc95710c810263baf1429b449cd8a1e4e1abfe41d15cf62164738e3ad996c2"}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000080)={0xffffffff, r2, 0x80000}) r7 = accept4$phonet_pipe(r2, 0x0, &(0x7f0000000140), 0x800) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000180)={0x8, 0x4, 0x5, 0x0, 0x0, [{{r0}, 0x20}, {{r6}, 0x3}, {{r0}, 0x6}, {{}, 0x1000}, {{r7}, 0x8000000000000001}]}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82187202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:25 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x900, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x0, r4}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = dup(0xffffffffffffffff) bind$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000240)={{0x2, 0x0, 0x80, {0x5000, 0x4000}}, "aca0b82251a4a901b22ef8cd1a2230cb2edfb1d8133d67d352ff1656cffdd5cbe5f03da42d0ce3ed51b58ec3f970ac4de9e15e80fdbdfe929ea2d31537e06c41243e255b3d9c11caa061fc8f76b1f9ed6a2aa1b49fc0f8586073421cd1fb9ab23926b3a43aad11471e961466981b4d15a2377e91158831994fa752522e8bd790132df7c9df4c48044738f17cda8a2ca5869b3e3981de64620af730402a510772be46efe38db7ad06fca5750537846d634007864f46b15296edd577e0426ab384fc7f286ca3301b8ba3beaf5ccc4346342c8a257d7fe70f3337a5c54277fc7e5407f077574d9c045fb253359d5e77d40d18636599207807f453ef7618717b5b8f802c4ab76ea9e4141dfd2c66e0cf356f5e1914ee41a2a40dbc37a2502bfa4e6c9b58091a0e89cbd51a9b05c00963d7972f4147856e3233ace2a81f12ce109f76d0ecdca690bdbc5464a70744e0966445f48a3cfbac199dd4e0e3f748d6f542307a8d9e1afae9881a4b0c7a4f5fa052270dc074820936433af062696055a853706e6bdace55a73dc1cb7673df847176fc0485d55a1d329d4953b1f839141f8bc67cb2b61aff6d1b8160a477cde2643ca0cdb8d03b68f3bb7c184c921227c4fa3a9fd3443501c46395c95ef32f1b4dd47f869573367be77060f01689adf16ebdea5092b2111b75191d52ec6d0c16acf609b33ef9e8f62a6fc20aba1d77d1f73aa5f21b18d5d98d45013b306107183088d157ebd62449bf2f7b0a1bc2c344ad7dd786cc638a5cc1b4476d0659b01a471ee78e54f25c2fdd3fe888d02f39c46097dfd14b1b1b3f81c22f19daa039dc59e282d3f146d629d083da38f7d05f26146c11e6adac8e9f561a5002d9b1116b06c1700f2c65b25862bcda196162494d346c37174b65a18fec2394f07f2562d102f63c51ccecd78b5339dc639e8caabff0b39a3a29e012f62efc3eaa4f416eea0d0df5f11d6756dbf8c57cf4a2c149c97d1776c6805c0be8793bda132db22b2e74d99c721e645abd335db33c1cb122bbf3dee8ac7e5f5283c4ebb899e19264381d1344868fcc34f080d82315822c985d1e1eb54fa22287a0a4306b687fc055fb3e5a7bad786a5f862b2432d7b211a371cbb4845180587a54654ad239ba788e078be2aa62ac4ae3716cf5ecec3349d1ac999b25d805ac3ff9333cf23cbe6d8db1986daf4236e43c944675151f8ff211b538e962af1da8b5800ee5a0d8645db12e5c83ca2bfb9ced304463d787a42adc0bba725cc91946743c2337d7751f216bad25cc9c795ed0d3d4c399063c0f91f3737079c6292e737c9547a79d836be36c402436a72576248c2b9402dd21a19817642d3e888290386240631311886ef220ea1ba425373a0366412bb42b3c7d8d08d481e448084cecba01fbf42829affb359331efe26d81d97d85210d3f6a911ba784c3e490f63caacca20b0138c88d500ffc9abeec6e20dd8a7b5c2149b8fb92e71af579f94ff2ae6c23eac0ee91cbe22cf1454b3b1ac4b7d461c5c63ae8c36869fcc475323d15be66588a8947d85a3f607da3a34f63d2eea36a68f647ac5a353e85eb3e5fca5a0cbdcad948b14680970a423d0a404e8542f174af89f0bc9a27a25fac340a978e85f8afe58bd1dee15544242aa101b1bb7575517b0cc0a7a459e6cc44049de7947a105596f2b2e0dd496d4c56f34cb770059d4d1822e09554ca0980ac351d55d105c4e346e405b7d3b3031e259e4eb5e74291c4fc3e2d73ebb83f555653bc709cdb935265c0a4aa62e05f0bcbbe3614f423780e3bd758c7b559ba2547cc290c4d94cfab8160b88fabff06b592b9d6ad5d9385c56888f6db89d6198c1410846ccb2bc604b63634766b26c05bf392eb17b34c6c9f809dfd0a42ed9d1fcf2df7b979173b984d7d5f1c7b28a0871008fcc2094aafe630ae9eca05f29d7e9c59f3f186598e479ad45ec76db0307ddf67ecd835ba93e9ef0b1f63572308d6f7c25bc1a7ff9657be81c3ab34282e2d425696b7e172f664a4d1780427b201dec04f7a075dfb6ea98e6d487e14320a7e3af446d4ccd10f57cbac1242d3effea636b9a26a5f2585ab32b9fa44f206f96604776118f1bf3608471e6caae1afbfbd90816767fb5c7eb5fbd3b44d9557666421f3cc1b4170b056eb6cfdb43c5553cf8491e7648871b9c0b6d85bc3aa2299de5ceff1a030dac064ae5f815a27c36433f41a3b66e6bfd3e8d9791164ceaac134313947be6f316df1b9e273b10474fb42403c9a37046e4e6894a8c6ac067881cf0fb29a7992f79c5da68ce7f03823ac646ca0ff386cd6ecbae869762b1a14ef383d88c713cf10d5eb68e38c595954ca25f6d9b7de87a1dd7daadd9dea4584144e2232dc20797b615b1ef96a86139e25f3a37493ab7547cb80eeecaad2448830a5810fb34cf50065d79fd51aa3b353b8f6bd9abea0e1899be99f7cf292d9de323bb0760728ac519934342275956c9566a59a0f0ef09eea6f1b9318fd4dff26d4e95f923323dd71adf9c1bc7b59a67b24ab68bfda619651c547499e4ddbfeaaa2a9c3d149586925bed1e2966db08eb4a346147944c3a6f5bd0749b416540d2be189d242cf23a87784d02706edfd1d0eff1888eeaae49a0284d3b25e8cd591637fc60076508e5b7c7c893fec6f7c05c19ec89b39bee80e62a21ebd5e1b93f03ed83f1d424e5dccf19b5443de45000234a10349c1f4923f95158b219d5af8801ab0beb7e1f16b2bf3415d1aa7e8dfd8e3a3e47b19ec5637b413aed97d16e6afb42536fc9f379df5242efc2f8db6afc5e206ccfe740139a6844800abfe9c8753e3d0985da973f45a74738af5bfdf49b6e1b529fe0c38ae2843a958b6f8cdaabe9bc2a8fc30c6ef62944e14ed0c1d240001049439d999901e4c1b3b670a3a908cb0fa5f9faf93a732a5a890f35be020cafc50d862653ca97defd0f08adddb60b6871aa8bd75923683dcfe0525b55ef804cde9720b39a9cb7f272d80a4db5483548372210b540aeb554b58703faf13c92be4330458e8dbd900143d32629bb01a9f9fa0fab78dd9efc3cec7517e3fb943565572cc5959a8341d9fda75ce544313aac369d33c918064c4ad87ce6d944e5e6c7b5cf0fa5219f6d97a5bd506e153ef585ab2b39616937f4dd412ba3bc06e4e095b1992d7fbd8a373e2df1765a5b8d1c3b41b4455c688d14a7b6fb1e43858f6db1d09c7711588fa9538f21d6892aa25cdca2fd75bda2cb12a899fc752217ee148e38e661d8fdc3c372d153c0097de61ad30a686a3ed268f918423ba1181adeee344a7b7fa5e507430ce8e480de5edb9fefc38014f6a8ee8fb16230512007347f51d2db5b7cb653020f2f7921d22035e1ed8b649043f5c873d2d21ee3c1f34faff792edbe0e6b6a03c1a92a10e8c8a1173cd8ef6d5a14045febee61fc9d04b3ece42e6b473fc517fe580d510069593c66f38df440f297c51aca170017cbc516021a9dbf1c1e6761b664880392dfa69e0c1ec425d674be1747355049bc2765e59b0f6224dec55ffa1e2f0f3cf1957545f8de29a36d42659a4940f3623f5aba5bb0565b864054959c8676007914e3e31d9108bdcc1a86380b3eed7960dc45072820871afabf1483163653e38784568082d966e1a8b05542dd260662944c9b646a344b3fda4fba527cc14da84cfb9ad0801d1b3dc05606d52aae9a3598308ec2fa39ab326360d8819b62ca46fdafde0aa31e2b8c529e57dbbc8c56e06e49e3a47035f236df0229ecf7bd3586988f977afc0abf9d8cd8a748de946e5ab85fceead540dc4a6f15c124bbd34cfae70fda43002c6e9eba32a0632d45ce386fbc5658d989458aaeb7eb9f5fc78d92114ddd03fa6e394cae746ccd2cb66bfb8c0e940c395c5f5f19a454324e189b08866367291fef850f0dadbc545c270a942710ed29baab400aff48f7d5b76446f84057739bf507f6e38f5f686ad1d75ee2e74269d9c9e556d7cd613c159592e4aac9def183fcadcba2446c284c77f3878f87339b3b71189af00f186def7a0b5407d8fea82870a585ff7526b84767148848b680811a3e41fdb7a4e1ae968e8e3dbc1c116b212fc6eca8b811139394340cb6cc1fc7cc1f215711ee2b9c2b9f3f5dbab067b7d9cf53405aa10dd482d61fff6137a09a765920552b1d22bdbe9beb7d52eb86beaa7ab5146c5f65beafa47d458d5c17070eb261ff39ea26f903653c65375a41ec9c3ab704aa1ae2adb40322999c85e3311cb3e1f1270abcdfc6c0fe6f961c64c7351376253ecc73c8688239f6fd0513681b15f41de0564d72c452a4345b94906a2990ae29445be1e0cce0717b47100c1c999e1f95a60fadc6ca21465f6285c6f907d5e8a97cae421f436cdaf32e66e134d71f0c0ff08109cc126a9702b4712ca8d1345f424e5d517e0838cb0ec63733b903e8c6f10c3fd9cc44cddd14f15daa639ebb470fb9c23b29a9c57bf79e9851288351a6e1d757cca439d9f827843b12a04aa57612ffc2436e6951a591f2075bdc220e0a832aaa5b60415423c84c6cc2812a83646e15812407e85d362115936a59a8e425f777dd37f75a126ec4433d2a11ba1cedee41c841f2b58fbc1cd3813de66cd22cfdd3ac44dfa57138a9321c2d5e3d27638f8dffb1f5be5b3f5917f5eb5f9c85ffb094448d98844bdf24ee0cdf5678478492c822f6a0a00a10dc9407fae943a2d628c7fc377130846e139c94ed000707d76c442a6c7ae3708d41eb6119c332542537c310f2746d5bf7d37981ce1a44b6940b1dae3d6e1839652b29d56e46537c745a31975527256c7fb35f1dbacfae0bdfba806b9844ae1c2cc00c43b7743d74021edd2afe50bf3cba26c16d89d515212d59264380091c2d6177aeb7d64e1163406612183022e874a5bd7ae0af844cc7940a085162a2d765dc6c8eccedecbf6c711c13072fba86669ae23d26fe9b797fc0deaf98e0db8b9e1f258052f4f630db740fcc7d647d91e4ed76dd3b4907b5b022879ee180d7b5b560a9d0d2b693a76d7c9e9cb0bd609199d88234aea485ca51aa5c000a033d4cf1916c70f503ee18da36be8cef1bfa15dc7f5826d5f497140ab78043ba99fb84632e0aa97fd609c3f908fe67010a333bd1d0235e50384ed6a879540436e96b069752e4e89cf9e93048c484516b2101c0bc6dc0cfca4f87e701a5b8a623781207a6e7c6d35b3a545dbda185ba3e226265f47b9f45c33cbf4a262d7ebd1f3a31bd9a2fd88da2a260e421312dda300f9273a33025f8cb60a77260a59ec36396385ba3836bf4ae99b36d13c8a039e21da770a48addca29308c98066c2ade4e20c980026e397a9e4f71ed2061a8367c3d2ab583b5935092f33fabb6fe73d21fdbcdcf3786df7e29176b15c0434d31fa51c22bd98dad06a353d1271bcb922fb0b895cdc7caee15af085d69f059122947f15d4fbbb5d499ab16ce0b06c87886cee1d189d1f942e964cc516940f89b3c889a3f6cbd0c5026c6ce0331277896fe2906b88e7b2af81939afc4d4d6591da881cf6da6e5cc30e1b7e37220b4eb9ca7581bc10be18901d8caa3833abd2a7db4eda4b8a675ca745bc06b416c3519e5a026a905d2f33666f06f966f037f6de09fbf93a79da56da96a5bccf727882c4edc17ae17cbe8de59fb5711c423f6cae726189acba4db66d289bf6e47bf3cde590bd236cbb39d74871171ad7e009a153945dc9ee0063a292fa7047364931a7997fbb6855948170b645b36e11492ec2d008c1242b44274f4f1c02dad6422b9ca5bae949d292808460c79f480134da827ee994f7b4f0c6", "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"}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f00000000c0)={0xc5, 0x0, r1}) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, &(0x7f0000002340)) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_SET_PIT(r9, 0x8048ae66, &(0x7f00000022c0)={[{0x9, 0x3f, 0x9, 0xd6, 0x2, 0x0, 0x2, 0x0, 0x9, 0x5, 0x81, 0x0, 0x4c8b}, {0xffffff01, 0xf001, 0x7, 0xa2, 0x0, 0x80, 0x2, 0x6, 0x20, 0xfe, 0x6, 0x1, 0x20}, {0x3, 0x5e, 0x1, 0x81, 0x1, 0x1, 0x3, 0x6, 0x3f, 0x4, 0x8, 0x5, 0x1}], 0x2d}) r10 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r10, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b8bde2cc8c66efbafc0cb09aeef20fc2cb99dbe3660f38806c79baf80c66b834f5ec8166efbafc0c66ed0f2122260f01cb6566dbe0b847008ed867e0fa", 0x41}], 0x1, 0x2, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1000}, @cr4], 0x2) (async) dup2(r0, r2) 14:12:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82187202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82187202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) [ 3426.944358][T12644] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:25 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82187202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82187202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x444000, 0x70) r3 = dup3(r2, r0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:26 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x0], 0x0, 0x0) [ 3427.201161][T12644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x444000, 0x70) r3 = dup3(r2, r0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x444000, 0x70) r3 = dup3(r2, r0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) open(&(0x7f0000000140)='./file0\x00', 0x444000, 0x70) (async) dup3(r2, r0, 0x80000) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x88, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/32, 0x20, 0x2, 0x23}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @free_buffer, @increfs={0x40046304, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x3}], 0xba, 0x0, &(0x7f0000000340)="dcd0b322516654fc700e3148418b3510a561e1a77156b6324cbb0b6013436096a6049dbbb159b4d0c2ffc6763434036cc47b0eca4251e9ca36dfbbb58babf41722ab4410449d908b2140efd6417033abbb1b28a7365c3983b0b6f925588e894a32cbaafa05a5e0bb7b4123bed6613f057237efe8f3c26358d65bf7273054bb261f0dd373d0d33c734426506b83c5033d76e5985eeaeb3a216ee0484d9716f3e9cb97e568b0e8730cfd82da5db6e19e2aeeb81dee5b3caa32c735"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="88a4cd704a82b4b01215bdf2f67973f2c1ba97f69c9089a5f98334c1015a37644730151a3205c05c455e7604072c0639cda91f804ade4c3e3aec42e60898c6d2c3cbb0c1e7bbe69cc7e9d8c2237713e6611d1281e5ac0e71f4936a8daeb8536beac260b9f5f1fb61ed709002ba45f8190739271c047461e444af9457e3c506c18fdf2bba4aed08d63d9694432c2910ec1f99c08acd150639767a020ad66d23220ff225af88a06702dc0602ad94800d0b52fe360666520fd265b21d096ddf8374a4875878c0d9fdcb2f64dd40f3f4"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6c00}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:26 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x3], 0x0, 0x0) 14:12:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x88, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/32, 0x20, 0x2, 0x23}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @free_buffer, @increfs={0x40046304, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x3}], 0xba, 0x0, &(0x7f0000000340)="dcd0b322516654fc700e3148418b3510a561e1a77156b6324cbb0b6013436096a6049dbbb159b4d0c2ffc6763434036cc47b0eca4251e9ca36dfbbb58babf41722ab4410449d908b2140efd6417033abbb1b28a7365c3983b0b6f925588e894a32cbaafa05a5e0bb7b4123bed6613f057237efe8f3c26358d65bf7273054bb261f0dd373d0d33c734426506b83c5033d76e5985eeaeb3a216ee0484d9716f3e9cb97e568b0e8730cfd82da5db6e19e2aeeb81dee5b3caa32c735"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="88a4cd704a82b4b01215bdf2f67973f2c1ba97f69c9089a5f98334c1015a37644730151a3205c05c455e7604072c0639cda91f804ade4c3e3aec42e60898c6d2c3cbb0c1e7bbe69cc7e9d8c2237713e6611d1281e5ac0e71f4936a8daeb8536beac260b9f5f1fb61ed709002ba45f8190739271c047461e444af9457e3c506c18fdf2bba4aed08d63d9694432c2910ec1f99c08acd150639767a020ad66d23220ff225af88a06702dc0602ad94800d0b52fe360666520fd265b21d096ddf8374a4875878c0d9fdcb2f64dd40f3f4"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x88, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/32, 0x20, 0x2, 0x23}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @free_buffer, @increfs={0x40046304, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x3}], 0xba, 0x0, &(0x7f0000000340)="dcd0b322516654fc700e3148418b3510a561e1a77156b6324cbb0b6013436096a6049dbbb159b4d0c2ffc6763434036cc47b0eca4251e9ca36dfbbb58babf41722ab4410449d908b2140efd6417033abbb1b28a7365c3983b0b6f925588e894a32cbaafa05a5e0bb7b4123bed6613f057237efe8f3c26358d65bf7273054bb261f0dd373d0d33c734426506b83c5033d76e5985eeaeb3a216ee0484d9716f3e9cb97e568b0e8730cfd82da5db6e19e2aeeb81dee5b3caa32c735"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r3, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="88a4cd704a82b4b01215bdf2f67973f2c1ba97f69c9089a5f98334c1015a37644730151a3205c05c455e7604072c0639cda91f804ade4c3e3aec42e60898c6d2c3cbb0c1e7bbe69cc7e9d8c2237713e6611d1281e5ac0e71f4936a8daeb8536beac260b9f5f1fb61ed709002ba45f8190739271c047461e444af9457e3c506c18fdf2bba4aed08d63d9694432c2910ec1f99c08acd150639767a020ad66d23220ff225af88a06702dc0602ad94800d0b52fe360666520fd265b21d096ddf8374a4875878c0d9fdcb2f64dd40f3f4"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:26 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x88, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000600)={@flat=@binder={0x73622a85, 0xb}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/32, 0x20, 0x2, 0x23}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}, @free_buffer, @increfs={0x40046304, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @acquire_done={0x40106309, 0x3}, @decrefs={0x40046307, 0x3}], 0xba, 0x0, &(0x7f0000000340)="dcd0b322516654fc700e3148418b3510a561e1a77156b6324cbb0b6013436096a6049dbbb159b4d0c2ffc6763434036cc47b0eca4251e9ca36dfbbb58babf41722ab4410449d908b2140efd6417033abbb1b28a7365c3983b0b6f925588e894a32cbaafa05a5e0bb7b4123bed6613f057237efe8f3c26358d65bf7273054bb261f0dd373d0d33c734426506b83c5033d76e5985eeaeb3a216ee0484d9716f3e9cb97e568b0e8730cfd82da5db6e19e2aeeb81dee5b3caa32c735"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r3, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="88a4cd704a82b4b01215bdf2f67973f2c1ba97f69c9089a5f98334c1015a37644730151a3205c05c455e7604072c0639cda91f804ade4c3e3aec42e60898c6d2c3cbb0c1e7bbe69cc7e9d8c2237713e6611d1281e5ac0e71f4936a8daeb8536beac260b9f5f1fb61ed709002ba45f8190739271c047461e444af9457e3c506c18fdf2bba4aed08d63d9694432c2910ec1f99c08acd150639767a020ad66d23220ff225af88a06702dc0602ad94800d0b52fe360666520fd265b21d096ddf8374a4875878c0d9fdcb2f64dd40f3f4"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3428.024323][T12691] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:27 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0xa00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x8}) dup2(r0, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 3428.593330][T12708] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:27 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x0], 0x0, 0x0) 14:12:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x8}) (async) dup2(r0, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) [ 3429.022383][T12708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x8}) dup2(r0, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x8}) (async) dup2(r0, r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x10001, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) 14:12:28 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x4], 0x0, 0x0) 14:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x7312}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:28 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 1) 14:12:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14d02, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x14d02, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) [ 3430.188384][T12737] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:29 executing program 5: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6a6a01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0xc00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:29 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r4, r3) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = dup3(r3, r5, 0x0) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81e8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000001940)={r11, 0x0, "d584f12358eea2848de7cd426773827181a3bd75fdff5da012cc57d8012605c79ee6e23b60bfcb361cb2d155e04bc3b20c94f779d2dc8d6af6d211d94b306f1cb7458079fb9cd2d18b58913ba7b5edecffcceccc8fe898a68453387dc313dff3353582b0d88f1fe30bfba0ea473e098b6f8702fe6eb299704ad86aa3052d129ac1c0701b72ec7b4f966df7e8c2fa29b28307d0d3b015893c3dc567ab2440a3df204b4976c918b6f3ecac769dcaaa42dec1ad8478ad8d542c6a693c8d06166dadaa4a8c8ee0b2665a6e320f118e82feac50345f6f107171121fc81747fa7c6c6e7b46070ad0187b50349efa6482bf47608ad8b4afcf6e6976aa5eb2ba3a28f13d", "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"}) dup(r8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xd8, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r7}, @increfs_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x5cb0, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0xe}, @fda={0x66646185, 0x2, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/244, 0xf4, 0x1, 0x1f}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}, 0x400}, @register_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/66, 0x42, 0x2, 0x29}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}, 0x440}], 0x4f, 0x0, &(0x7f0000000440)="b0221990d30bd8d4fc81323962aeea176c91cc5d4df2c58f1596e1ea13adbf5034ac110ce18102293ffc68af147bfb358d5a8b8059102572eff4bd180e9bd87d2566d2b7ec26d3a678aa0e573c9fd0"}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:29 executing program 5: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6a6a01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) (async) dup2(r0, r2) 14:12:29 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = dup3(r1, r0, 0x0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r4, r3) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = dup3(r3, r5, 0x0) (async, rerun: 32) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) (async, rerun: 64) r8 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81e8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0}) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000001940)={r11, 0x0, "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", "e66dc2090f6b919e567f62a9c320e23665ff8cb12e3514428219fd94d3ff08e3d54492eef4594752fcc32c2a3adf1bb51cd11e4d5aae0f2c9bf99eb927eb6f8c19a605ee6a83b65783cc3ecd8fde4d022d6c1c662384a679450449826c17e3ba2faf092f177828a4ba9275b6d794c9ae2b05867a3f32e833c616bf12f94bea588de7205719291cfe1fac416a41ef7c81433c95c3ab294ce7946b8246b5ca9ca094dd1a0b37680261554df365dce1ca5ed32061b6a163ffbab5a9f02c1b9551d10a88f7121362788eb80c253c5e13d2b57215fea8af8642bbd775d525ad26ab717597e97d01dc5ec1a33c05a5786d72b6de52d75e9999dfab1fb7005cdafc1e466be449857628202d736a88196aa397bed86ea02173b21bb91ba0999ca5134f81d983d9c23b99b3f983aee27c46b6ce00cfd9cd9ece1afddd8e8b74f73f974b45806c53a0273566005884a883a4bf7c5afd30c53851987a1a11b2434fa214cf715a1b0fa0f30b51e9e1b986bb030fd459b82e0da941e3d001a5e1973c55be76040febd1bd97f2043d1411d9721e8d42632b6a748a4eeb3af54a501c5e218770f67ce00f664f03bb888f49586e4582b769307c76c08f8ba07f25682ce69a11637a36623f45c19d03e901f3b37b9ca3984f3fbc22675ceccd1b93e61fc0fe1f84ee285e914e3e1c7d2a7dd29e88a9b5f77e228b2025bbc64309e6e3dfe4c5c4b6e880f709cb4a45107c76caf9de1e888196f4f93876f0df64ad3489d735c4b42f269e8bd4fa90a6c22d489e9e45edd972bf914af4ece203b1fbf3ff1a50f78cbdd9d1e8541ed36c1462604ed3d481174cfb14eed5ca4b85e8213a8175e55dcb9562c7bf3ad4a3e336d199735b076f844a3570e6cc3ed6084dd403df4d59bb0bf2aa9d4a1c01028935ccc5d20cd11c707393d62d382c6ba61ea037b2cb015e8e1a5b0a3058de0e0442bec1891dac3c6f899d62994633ebf67d018cd9cbc485293de61939ab8d39b82f5b129a1f037a63c08f80bddd7f77a9d1c900c105acc686fb25365f143b9178ebecc8d45060b07aa0c82abd223c778b0412960018545245558b5c3c96578ebd289957d949bcc58f228909e1adaa2e4900c52666f715736f598b1feb0b4cd9686d1dba59c53649966aa13c9d338480d2629aa21ec34c6c994be7567bc8f5c840c55438f9a592bd6a439c2ca946edb8b217341960aaaed19f5eb8df5e744cf26cb35b8cc39be088f5896ed067e1ae87be9d52713210001abe0624b84aa808d78902d082e55b93108a0cc2836be8eb1b0066c45839ca4b6967b6f3ff2ace5f61d2a67624df366fc0dae8178bcf69aa76891e547005d8c0c00ce0e3b972393a3e3de05fbb1294cfd45a82f51426e3ed7009bad43ca9d774c2f168cf7a527b74717ce7e5dbda33243a08ea2790aaea6227cc6e353de43272e720701da83a2472403313935cee6f5ed609af8507d3fd25e22e3d4d0283c0e3cd290a59ec49266e48323302b9d9e193b80cbf994742536838a6840003d919c355ce859200cdeb72a1fefde06c41a66d0163176d7277a183bc0b49ac3818dd6a567353c39335749033c82f8dfe123ec836523652b118d5652b5719e7e463f95f94b81b28f9a562715449ece5f01078feda8d7e986ead368a0c8985f6d09d365320cd63ddaad889bb573062c6122b0e4b62b662cbe2d5f41ae54af4e1f89ac4933b563db0d7c5a30c8ead5ab8c8cc0c47440b4251ca86b010428b11e33e096c4fdac6051f3f3127e576a6d57fa7487bf3e535843efdb37fe71b901c1e98a6db91b25464f458e989f866698a30be5a916fe271bed3b7ee6d1069bd359f6d27b3f48714efc8bfb26036de128a4fe721873b478db98b17c9c89e1819fb33c3be85a81ab432f6f95b7de5e023934dd5543ac93ef696af50230963fda51193e08595f9b357ee74aa08cf2f40e5a5a08681d4a3fa79fc5ca540e0a3da348e55f3f528b23890dd553ebd64afce9875d440a99942f5ff5957c62d29e343b7e38e03b35de5972574d41337a3fecbd2ddbdef7530f3be636a9086f0c6426e6e647c26bcdae0ebc06e422a5721e78698a580a4937a4d88c5c40e18b8732bcb2bffccead8cd27064b2ffa9b738f8899455c94c99a9c7cd9e689898a281c43e6dd6b2db97194e55b9c298468cb13e0bac10741fdce169c6c9b6cefc4c193008184befb36961a517bc3547845f129ab4d491cf0b201f7874f090904eea2a0d14098e7c7f8bf96492cb05d34de923e3a1bfffed70df7e3bfb105dcc2a1e3bda5b14f59d13107c722eaaf143fea7595499710396d814fe36c0262ddf647a82eb25e7e32a7244665a1cd05d2e8a6ccaf29d50d36472ed589e1bef82a259791259c56529978ae5a6def107b925a24b29fcae1409750d0a9205e49af93e74bb5ba5f0a147e15d5cde087671227fdc5fb81fa0a9dfc628f6585113221131f5affbc4c3f9f7f89e39df20f05a4eebeb37a2ac875b710f0dd63d6a7b484e39ea8d1fe9b111f3b2c32ffeebd493dc4336214e4737349a47d59c8bcf69bbd670b595de5f82baea2ffdcc26251f2a94c43b568cd21aedc3c86c742de5f5dbd141ffff6016c375f2d5bf91e51d14e552949361688177816178e1074b27c7fb1ee5be75d7a59ca371e967ee989951415fa34ab2adc240f3b7f172bc376a993a982cb2e5785fe07ccb0a69534446b80f22a9ca9a8df0cc4e8cd1ac9ac81ad2f8691eab26e6bc842d141fa06b47ea495f0ee2481157605c0ea9f6ecde823abe6a72ae37d2e159c70f2d478d566a2d3b538233ef01ae4fb44afb50497a970db00636ecc3ea69f5b2e99f2f058b717bea1107751dcbeae8ae5b474c0337ddfe80f5ffcb4ebdd5d6e7f584613a43a486ecd2959f7d54bd0c96defdc2ba262f2ac20b4cd4b23285652e2d8c5ca3933a8a8b709ff91627b456b90d02e4692570feb17b6b764fc2993994daea9275e946ae4aa8cb8b0928e7f9bb193f4f6f5969a2ab8d7dfb47153596ef4e344d1ffa4590d18a8355727fa3e341bd1791c659585f5318005bef53f2b5ea9cd37b6ae4614f26de821c8bc5703d24724bc62a88cbc94758af7183f497a20a5abafc6d960f5ae5d8dbb6f7df1a886c741a84ef1e9732fa971b390083fba285519bbd175940b0e5afae615581278adadaa5f55c7b9d2a536922e6be71fcd42797757da4bfc4b3ee1d34c1499edcf746965e021c5e298d6b6cc350fe2015b05dd7f2d221aa06df063a1b921668aa73faf17a916bdc599911d6110a5ac90aadbdeec04b2f883e959be48b19347a52361f0de3b5430bf44dacaca295a911fc8850b105a12e38567159005746bdf26f208505d9e878a353c1e698e2b6082912990baedc026f5e353e4687d0a41c856c7cdb898609d99bc9bf5cb7fb48fb50df269e3bed155dfc8e6779e7dc3ba26c360d93be553fef88ca671b0820720bfbdc33a32747fb580f95e0bea9ed42e2fc760f236bc3ac03a8cdc745f4ce8a2ccf74a72bee6d727377a7e8844a3a55ebbe463ca63d531e794ec3e9eb7ddc6146cde1180795e51f58a0c255398602fd713c62c912b47922086cdaa7ac472bdfe8304b51145aa5fe6d544862ec7a5f0b62559071cef7cedfa0b3e4c53978e8536507c271832838f7e7c60994fc941a001c0908cef8b94f19b5b685eeabd2d15f039e60051fae2ce930c487de6ea411b06183fa9ae3a80d18d90c36d76748cb95f483d957161967142c2d3a40a47c38500ab525a977f97186389e890749835c92e6a1ea8a9a67d639ad1416452ffcb11160afb798339120463acefb4fd2e56e2c0e4b95dad87e40db293627150fe68329aae3e5875ce266b754b1b2417e2c9524581893655d67a8e39649499f41d95a30f9c0a2c664437033dbcbd70b00849619b9de6430c979b8be02da9deab87d9a6826b70b159a435c0f98147a19ade8f796e218de6d13ddb0d6b807c7b070780e23aef2c8b7d53eef950cf4973309f7a36f8f6e0815c35aa4e638f164ca74e7ea3dd49c829d5c292d857384f05cfe2f7ad87208dd30567e26e3c98a7a640bd0a42aedd095a6ab6da049476a41e33b22051fe077444862d68a2eb2efeb3d1182dae20eaef7c44890aad2e075b64c26c58683191562d3883844910e673424fbc49c810d38d809888e1d29359161c2f1d2825a236d38084949325e8e914044402a2c1c1e7d6c2ad0b256c98e8d081dbde2ac9b42bd8ce13628e4d61599fff8c94ed0a1b9c4856eeed371827f6ff8a6574d125591c8f740f24158de205a3340f2ecc04885ffebf7ef2eb99846dd31b8e2e8efa65402faae3ce23eb41f3df528b39b2bea83581801d8e779b48f85df0db53f022ae323a9f49642a1630cb4ed1b7d445d8f1dd59aae5316791e24fcdb50384149210bc5b48a233138763635da39e2f11cfc04e4c1eff4df903f50a42216bb27a09c6b3931ba01516c1dad8fcd3e5d9a3d776580f9034031a63ae297a514b5f9d64fe9c1108afc718892a8ea0aa2e030d5a28c21d46b8cd7420a579455d007dd23902f6d4de7a7b5774dedbd7fc0771392e3ee2df81ba046520b5ab568a78d1bc0209fe7c4823447c672e6b8cdbc89e642a7507856f4eaa7af2d64ae91397c15d1c743a44f2fd6c50d2e9695b52893085e730549512ad2129793ad1baa16265108ce841bcac4663ff9d2de7df241af76028a9a399a4790a3999375c18f734548bf83f316cd657971cb100dd91520d71f7ffbfb95ea1e3806768d3ee3cffd90036e176d720654180bd47be8c2e793cdd2a97fe806db4edd8f40d08aa04f8822ea97ff04e351d5cda5a658371864a29eb94b5f9f23e116e8f0e6791234c2d72600f9ccd57da6cc6de517ef2c57621a0ca037baec6c6e6ca419f6fc279946f8c26b0947ab69523ad9b3bb1b94c20851b0abf80170b513f955580ebea83fa0baf27c23836b22766ae23a7514fb35f28a3a67fdcecf97bc0d12df2ab6e8acf4f47210795bccb34bef3d2f38bd84a8c39d0e18a6df001badd7ade3ee42bff858a6fb255281e03d41aa7414611624ed5fea40527d273be046ab76ccf9786fd68ba0344c014538172ac0608579bf2d65ba48b225ea79487885bc48eaf43a7ff67f6c6de96501c4e2d6dc5f90e496e76234b2da505be4174979e582c1a41b492a7bda7cbd78fd82e2b518311c33501e8fd903134ec52b572cf52acd376a35de162629e190e43e73391877699a53f32dff50301b83901792601c09e2d6f34cec07b7aa6b55d1337090f6919dec803d3201d329f9ef571e3c7d49470a79e30bbfb6e8c3895148534ab26f254ab165ac4e756dfe453ff399046435b69c986567bc905ab87400a7d79fe012a87e9b71c390f35fe52547b2f57d912ed8b67f399041ea78db6a21b8c64"}) (async) dup(r8) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xd8, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r7}, @increfs_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x5cb0, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0xe}, @fda={0x66646185, 0x2, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/244, 0xf4, 0x1, 0x1f}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}, 0x400}, @register_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/66, 0x42, 0x2, 0x29}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}, 0x440}], 0x4f, 0x0, &(0x7f0000000440)="b0221990d30bd8d4fc81323962aeea176c91cc5d4df2c58f1596e1ea13adbf5034ac110ce18102293ffc68af147bfb358d5a8b8059102572eff4bd180e9bd87d2566d2b7ec26d3a678aa0e573c9fd0"}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3430.514751][T12747] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:29 executing program 5: ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x6a6a01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) [ 3430.593773][T12752] binder_alloc: binder_alloc_mmap_handler: 12751 20ffc000-20ffd000 already mapped failed -16 [ 3430.632707][T12752] binder_alloc: binder_alloc_mmap_handler: 12751 20ffc000-20ffd000 already mapped failed -16 [ 3430.668189][T12752] binder_alloc: binder_alloc_mmap_handler: 12751 20ffc000-20ffd000 already mapped failed -16 14:12:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) [ 3430.732644][T12752] binder_alloc: binder_alloc_mmap_handler: 12751 20ffc000-20ffd000 already mapped failed -16 14:12:29 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x7], 0x0, 0x0) [ 3430.902242][T12747] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:29 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r4, r3) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r6 = dup3(r3, r5, 0x0) r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81e8943c, &(0x7f0000001740)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81e8943c, &(0x7f0000001740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f0000001940)={r11, 0x0, "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", "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"}) dup(r8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0xd8, 0x0, &(0x7f0000000600)=[@free_buffer={0x40086303, r7}, @increfs_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x5cb0, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0xe}, @fda={0x66646185, 0x2, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/244, 0xf4, 0x1, 0x1f}}, &(0x7f0000000080)={0x0, 0x28, 0x44}}, 0x400}, @register_looper, @request_death={0x400c630e, 0x3}, @dead_binder_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@handle={0x73682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/66, 0x42, 0x2, 0x29}, @fd={0x66642a85, 0x0, r8}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}, 0x440}], 0x4f, 0x0, &(0x7f0000000440)="b0221990d30bd8d4fc81323962aeea176c91cc5d4df2c58f1596e1ea13adbf5034ac110ce18102293ffc68af147bfb358d5a8b8059102572eff4bd180e9bd87d2566d2b7ec26d3a678aa0e573c9fd0"}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:30 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 2) 14:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r3}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r3}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x208000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:30 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x7400}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r3}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r3}, 0x14) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="03630000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3431.798559][T12793] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="03630000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:30 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x1273, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:30 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="03630000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="03630000"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:31 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x8], 0x0, 0x0) [ 3432.168462][T12807] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) (async) dup2(r0, r3) 14:12:31 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 3) [ 3432.460835][T12807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) (async) dup2(r0, r3) 14:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:31 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1000, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r6, r5) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r8 = dup3(r5, r7, 0x0) r9 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x48, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}, @increfs, @exit_looper, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r9}, @enter_looper, @register_looper, @release, @release={0x40046306, 0x7}], 0x20, 0x0, &(0x7f0000000040)="4ca67404c6a670176204b1fff7981006802ecb9c993b65162709dccd2c628115"}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e631c40d5129119f6e62aebe64734a43224bf5fcaf84ef6d2"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) r4 = openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1000, 0x2}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) (async) dup2(r6, r5) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r8 = dup3(r5, r7, 0x0) (async) r9 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x48, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}, @increfs, @exit_looper, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r9}, @enter_looper, @register_looper, @release, @release={0x40046306, 0x7}], 0x20, 0x0, &(0x7f0000000040)="4ca67404c6a670176204b1fff7981006802ecb9c993b65162709dccd2c628115"}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e631c40d5129119f6e62aebe64734a43224bf5fcaf84ef6d2"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x8001, 0x4, &(0x7f0000000000)=0x80000000}) dup2(r0, r2) 14:12:32 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x7a00}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1000, 0x2}) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) (async) dup2(r6, r5) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r8 = dup3(r5, r7, 0x0) (async) r9 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r9}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x48, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x2}, @increfs, @exit_looper, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r9}, @enter_looper, @register_looper, @release, @release={0x40046306, 0x7}], 0x20, 0x0, &(0x7f0000000040)="4ca67404c6a670176204b1fff7981006802ecb9c993b65162709dccd2c628115"}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e631c40d5129119f6e62aebe64734a43224bf5fcaf84ef6d2"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:32 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0xa], 0x0, 0x0) 14:12:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000040)={0x38}) 14:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x8001, 0x4, &(0x7f0000000000)=0x80000000}) dup2(r0, r2) 14:12:32 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x1f00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3433.700605][T12852] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:32 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (fail_nth: 4) 14:12:32 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000040)={0x38}) 14:12:32 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r2, 0x3ba0, &(0x7f0000000040)={0x38}) 14:12:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x8001, 0x4, &(0x7f0000000000)=0x80000000}) (async) dup2(r0, r2) [ 3433.918939][T12866] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 3433.983362][T12867] FAULT_INJECTION: forcing a failure. [ 3433.983362][T12867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3434.047655][T12867] CPU: 1 PID: 12867 Comm: syz-executor.1 Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 3434.057765][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3434.067807][T12867] Call Trace: [ 3434.071074][T12867] [ 3434.073988][T12867] dump_stack_lvl+0x125/0x1b0 [ 3434.078661][T12867] should_fail_ex+0x496/0x5b0 [ 3434.083333][T12867] _copy_from_user+0x30/0xf0 [ 3434.088017][T12867] kstrtouint_from_user+0xd7/0x1b0 [ 3434.093141][T12867] ? kstrtouint+0x130/0x130 [ 3434.097644][T12867] ? 0xffffffff81000000 [ 3434.101795][T12867] ? lock_acquire+0x464/0x520 [ 3434.106463][T12867] ? lock_sync+0x190/0x190 [ 3434.110873][T12867] proc_fail_nth_write+0x84/0x260 [ 3434.115908][T12867] ? proc_task_getattr+0x230/0x230 [ 3434.121008][T12867] ? preempt_count_sub+0x160/0x160 [ 3434.126129][T12867] vfs_write+0x2a4/0xdf0 [ 3434.130362][T12867] ? proc_task_getattr+0x230/0x230 [ 3434.135476][T12867] ? kernel_write+0x6c0/0x6c0 [ 3434.140141][T12867] ? mutex_trylock+0x130/0x130 [ 3434.144896][T12867] ? __fget_files+0x256/0x400 [ 3434.149561][T12867] ksys_write+0x12f/0x250 [ 3434.153881][T12867] ? __ia32_sys_read+0xb0/0xb0 [ 3434.158633][T12867] ? rcu_is_watching+0x12/0xb0 [ 3434.163391][T12867] __do_fast_syscall_32+0x79/0x110 [ 3434.168489][T12867] do_fast_syscall_32+0x33/0x70 [ 3434.173329][T12867] entry_SYSENTER_compat_after_hwframe+0x70/0x7a [ 3434.179666][T12867] RIP: 0023:0xf7f0a579 [ 3434.183731][T12867] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 3434.203359][T12867] RSP: 002b:00000000f7ee45e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 3434.211765][T12867] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f7ee4670 [ 3434.219719][T12867] RDX: 0000000000000001 RSI: 00000000f7354ff4 RDI: 0000000000000000 [ 3434.227673][T12867] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 3434.235628][T12867] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3434.243582][T12867] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3434.251542][T12867] 14:12:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) [ 3434.442981][T12866] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) 14:12:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='(*%/]\x90\xd8)+\x00', 0x0, r6) r7 = dup(r3) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000000c0)) dup2(r0, r2) 14:12:33 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) 14:12:33 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer, @dead_binder_done, @decrefs={0x40046307, 0x2}], 0x33, 0x0, &(0x7f0000000240)="40289c6fbe7b2235238e7ec67fe992e3346416f029a557e8977c7752255efddef317a6250dab748ff35fd38b0f402d723cc768"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:33 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0xf], 0x0, 0x0) 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer, @dead_binder_done, @decrefs={0x40046307, 0x2}], 0x33, 0x0, &(0x7f0000000240)="40289c6fbe7b2235238e7ec67fe992e3346416f029a557e8977c7752255efddef317a6250dab748ff35fd38b0f402d723cc768"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:34 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8100}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='(*%/]\x90\xd8)+\x00', 0x0, r6) r7 = dup(r3) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000000c0)) dup2(r0, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r4) (async) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='(*%/]\x90\xd8)+\x00', 0x0, r6) (async) dup(r3) (async) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r8) (async) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000000c0)) (async) dup2(r0, r2) (async) 14:12:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x2000, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r3 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer, @dead_binder_done, @decrefs={0x40046307, 0x2}], 0x33, 0x0, &(0x7f0000000240)="40289c6fbe7b2235238e7ec67fe992e3346416f029a557e8977c7752255efddef317a6250dab748ff35fd38b0f402d723cc768"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0xa, 0x1}, @fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0x1000, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @free_buffer, @dead_binder_done, @decrefs={0x40046307, 0x2}], 0x33, 0x0, &(0x7f0000000240)="40289c6fbe7b2235238e7ec67fe992e3346416f029a557e8977c7752255efddef317a6250dab748ff35fd38b0f402d723cc768"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff, 0x84}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x33, 0x0, &(0x7f0000000180)="c5d63c83ed9fabf104e4110936293ba667618e80dc4fe413205ac596e7a1ea6e9f7194267f4eb341069e757e4af418d0b8f2ea"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff, 0x84}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x33, 0x0, &(0x7f0000000180)="c5d63c83ed9fabf104e4110936293ba667618e80dc4fe413205ac596e7a1ea6e9f7194267f4eb341069e757e4af418d0b8f2ea"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff, 0x84}}, './file0\x00'}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x33, 0x0, &(0x7f0000000180)="c5d63c83ed9fabf104e4110936293ba667618e80dc4fe413205ac596e7a1ea6e9f7194267f4eb341069e757e4af418d0b8f2ea"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) (async) [ 3435.492746][T12915] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 3435.542189][T12916] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff, 0x84}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x2}], 0x33, 0x0, &(0x7f0000000180)="c5d63c83ed9fabf104e4110936293ba667618e80dc4fe413205ac596e7a1ea6e9f7194267f4eb341069e757e4af418d0b8f2ea"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001}) 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffeffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 14:12:34 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='(*%/]\x90\xd8)+\x00', 0x0, r6) (async) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='(*%/]\x90\xd8)+\x00', 0x0, r6) dup(r3) (async) r7 = dup(r3) bind$unix(r7, &(0x7f0000000080)=@abs, 0x6e) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r9, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f00000000c0)) dup2(r0, r2) [ 3435.841839][T12916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffeffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 14:12:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffeffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) (async) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffeffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x20a}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) 14:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x604802, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r5) 14:12:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x16, 0x0, &(0x7f0000000140)="269c1962545656c56ea0f53b62764197ca5c242d6095"}) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffb, 0x5}) 14:12:35 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x10], 0x0, 0x0) 14:12:35 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x2], 0x0, 0x0) 14:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x604802, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r5) 14:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x604802, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r5) 14:12:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x16, 0x0, &(0x7f0000000140)="269c1962545656c56ea0f53b62764197ca5c242d6095"}) (async) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffb, 0x5}) 14:12:35 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x2400, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:35 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x98f2}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), 0x16, 0x0, &(0x7f0000000140)="269c1962545656c56ea0f53b62764197ca5c242d6095"}) (async) ioctl$FS_IOC_RESVSP(r2, 0x402c5828, &(0x7f0000000040)={0x0, 0x2, 0xfffffffffffffffb, 0x5}) [ 3436.896087][T12961] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3437.000631][T12961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3437.101079][T12972] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:36 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x3], 0x0, 0x0) 14:12:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:36 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:36 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8c, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x1, 0xf}, @flat=@handle={0x73682a85, 0x0, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x2c}}, &(0x7f0000000080)={0x0, 0x1c, 0x34}}, 0x400}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x3}], 0xf8, 0x0, &(0x7f0000000280)="18d7505780b99af122283a3daf72745bedf8dad48a1f53765bc82daad508a2b6afffc93b761da3012fc44042630756958b6336a33cc3d32611a4cf952b5e6545d51656964931002b4f92a8956032206d498b6a60d316ec13c36af80548816abfab983c4b759f62043f8477622f743d646da053812c7bc19247dd52c7df0a9245e40fef7d1e43dda18f2e09345912171b949f6d02c7585d0c1b283e0a1d06a18bb627acb6404d97925ee28c665e64b0957b7f6d35f7649284c61901a3823f7e7442ff7f32f55884cf1e77bdd50f76d07429a81ebae670e1e7b2b81a61a13d89a380c3eefb47654b568cd08d97258cfd1e9bfaf02360cf9651"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000000440)={"bad5fcd4697612954b8eb81fbb8ddd52", 0x0, 0x0, {0x2}, {0x1f, 0x7}, 0x602, [0x7, 0xffff, 0x0, 0x7, 0x6, 0x7fffffff, 0xab, 0x0, 0xe6, 0x6, 0x0, 0x8000000000000000, 0x8, 0x8, 0x4, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000740)={{r6}, r7, 0x10, @unused=[0x6, 0x7, 0x7, 0x9], @subvolid=0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:36 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8c, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x1, 0xf}, @flat=@handle={0x73682a85, 0x0, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x2c}}, &(0x7f0000000080)={0x0, 0x1c, 0x34}}, 0x400}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x3}], 0xf8, 0x0, &(0x7f0000000280)="18d7505780b99af122283a3daf72745bedf8dad48a1f53765bc82daad508a2b6afffc93b761da3012fc44042630756958b6336a33cc3d32611a4cf952b5e6545d51656964931002b4f92a8956032206d498b6a60d316ec13c36af80548816abfab983c4b759f62043f8477622f743d646da053812c7bc19247dd52c7df0a9245e40fef7d1e43dda18f2e09345912171b949f6d02c7585d0c1b283e0a1d06a18bb627acb6404d97925ee28c665e64b0957b7f6d35f7649284c61901a3823f7e7442ff7f32f55884cf1e77bdd50f76d07429a81ebae670e1e7b2b81a61a13d89a380c3eefb47654b568cd08d97258cfd1e9bfaf02360cf9651"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r4) (async) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r6) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000000440)={"bad5fcd4697612954b8eb81fbb8ddd52", 0x0, 0x0, {0x2}, {0x1f, 0x7}, 0x602, [0x7, 0xffff, 0x0, 0x7, 0x6, 0x7fffffff, 0xab, 0x0, 0xe6, 0x6, 0x0, 0x8000000000000000, 0x8, 0x8, 0x4, 0x9]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000000440)={"bad5fcd4697612954b8eb81fbb8ddd52", 0x0, 0x0, {0x2}, {0x1f, 0x7}, 0x602, [0x7, 0xffff, 0x0, 0x7, 0x6, 0x7fffffff, 0xab, 0x0, 0xe6, 0x6, 0x0, 0x8000000000000000, 0x8, 0x8, 0x4, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000740)={{r6}, r7, 0x10, @unused=[0x6, 0x7, 0x7, 0x9], @subvolid=0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x2800, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$vcsa(0xffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8c, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x3, 0x1, 0xf}, @flat=@handle={0x73682a85, 0x0, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x2c}}, &(0x7f0000000080)={0x0, 0x1c, 0x34}}, 0x400}, @increfs={0x40046304, 0x2}, @decrefs={0x40046307, 0x2}, @free_buffer, @acquire_done={0x40106309, 0x3}], 0xf8, 0x0, &(0x7f0000000280)="18d7505780b99af122283a3daf72745bedf8dad48a1f53765bc82daad508a2b6afffc93b761da3012fc44042630756958b6336a33cc3d32611a4cf952b5e6545d51656964931002b4f92a8956032206d498b6a60d316ec13c36af80548816abfab983c4b759f62043f8477622f743d646da053812c7bc19247dd52c7df0a9245e40fef7d1e43dda18f2e09345912171b949f6d02c7585d0c1b283e0a1d06a18bb627acb6404d97925ee28c665e64b0957b7f6d35f7649284c61901a3823f7e7442ff7f32f55884cf1e77bdd50f76d07429a81ebae670e1e7b2b81a61a13d89a380c3eefb47654b568cd08d97258cfd1e9bfaf02360cf9651"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 32) r3 = dup3(r1, r0, 0x0) (rerun: 32) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 32) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) dup(r6) (async, rerun: 64) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000000440)={"bad5fcd4697612954b8eb81fbb8ddd52", 0x0, 0x0, {0x2}, {0x1f, 0x7}, 0x602, [0x7, 0xffff, 0x0, 0x7, 0x6, 0x7fffffff, 0xab, 0x0, 0xe6, 0x6, 0x0, 0x8000000000000000, 0x8, 0x8, 0x4, 0x9]}) (rerun: 64) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000000740)={{r6}, r7, 0x10, @unused=[0x6, 0x7, 0x7, 0x9], @subvolid=0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3438.475900][T13015] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:37 executing program 5: setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000000c0)=""/131) dup2(r0, r2) 14:12:37 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xf000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x40242) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0ecc266f"], 0xfffffffffffffed0, 0x1000000000000, 0x0}) [ 3438.650733][T13015] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x40242) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0ecc266f"], 0xfffffffffffffed0, 0x1000000000000, 0x0}) 14:12:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x40242) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0ecc266f"], 0xfffffffffffffed0, 0x1000000000000, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x40242) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0ecc266f"], 0xfffffffffffffed0, 0x1000000000000, 0x0}) (async) 14:12:37 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) [ 3438.883514][T13031] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:37 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x4], 0x0, 0x0) 14:12:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x20000000000001bd, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) write$binfmt_aout(r2, &(0x7f0000000740)={{0x10b, 0xff, 0x3, 0x248, 0x2e8, 0x81, 0x19d}, "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", ['\x00']}, 0x1120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:37 executing program 5: setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000000c0)=""/131) dup2(r0, r2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x1}) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000000c0)=""/131) (async) dup2(r0, r2) (async) 14:12:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100), 0x20000000000001bd, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) write$binfmt_aout(r2, &(0x7f0000000740)={{0x10b, 0xff, 0x3, 0x248, 0x2e8, 0x81, 0x19d}, "37a445b225e89d0697b29c919029d21ab1c1af947dfabb4e0a3577656f222ff03ad44a887fb162c37e180ec2f1af8e8d49c1b7af28c1e9b95da15b2dc2a81e9dada26f1b40e4de3b849af489e36933f3a2e4dfb0678648dcabafedb2e836e818acbe2f4738f195d40b55aedcc699310a58cf5f220aeea4590d460134842bf4b2b3e810364630d4793853e79f81b46ac6b3a0a2cfc18cc43fab26a5227d6a0da5de69a70abd2e2014c558d6cc2034fc884d4a8eeb9790c72a45031d6ac5b9988304b06deed0057f3237cf87eb151f2a2f40c9eb5cb9d5e370c4b212137867f7b67ac76e792a02325dba4cc4aeb6e28973190199a9e540d9f42812d3c7a7c7355ea71df5fad78fb339dfaa53c77067687fe3b308b7acae1b6163acc5a5607d08590b7eb6038ba886434376f1871cd5fa4bf4e6f6b743fa2601d367e8cd0e03ff41eae79a18b5c150eb22aeac2ec9b2eb68e570441aad8bd21e889d1be95bdb5fc775d813cd50995ae1119f6c14949532be4eb0185460041705745c6ecf9cf8583eeed01c15af967c50e856d0920d6d8ca15fdc5a6b27eb07deb756b05eb2be1594968d7fceda31090025d6d5159cc964d9a776fa68b59c12caf92f4cae12a991eb576cdadf01efca1212ae87338cb8d30701682b50be088082fc32acad0b7204cecf201be1e72d9c45115a57e5620e075ecb0b52e6c815edca834e0c0677dc6e474c7b127b5a0232b3993dad3ec7839abf9e6b7794456b1a8f58c99d49ba86fea21fe5b2d98d469989fca69bf41d77d4aa612b9c209e047faed860553720fedfc00c820d95314e82a8098d87e4df34c1f95c4ea35a818ce0ee72ae66b0a72128230c2a2269024a916ad1242fab132ef51188246c91c70ce865178804db37c3856d9398399706c3c8961d831f607e2a86a200a57f44d6994fdaf14384933b2c0b3943cff79b5006268c78ace094c7e6b1b878753de655220eb4b01288be4b85e21098d6be32594a701d20a80b124743b3eabab78ee5cda548d85913e30c5f806a87ef119e72819381b9d5e4d12e617539b86e71efdd6eab6d476bb67cd44f70b4e6c872150f14e82ab3235a1a2d3a7365bb92da66aa0b212d78b7b6a772f75f069f700b594799c59d515ee0b4b368e5b53e6b0b416baf71b75d3b0eb9135c152d4f71cfa5c623d0613afa9d0e0b19a971f9c2a62bf2d50a42aabadc542fab1492681751487be934c5bf98c676d6170fa00bd614e1cf181eacf51696c990291b8701903f28f73a4e502cdb090f20b1310e7a538a507c922dc59bfd05512d637e6b70899abd3506268471899d714d462694f0aa88e9a5272324ae2a94963b7027ad27908c438e7faf041f531c271c537d4331c1b12b1e37714fe5798e77a70ba082a2bad6cd3e7b4af5302f2aa6f079eb22ca644a7dc55d8972390f864284ec7709cf45ed40c90e77ac921e41cc199eb4495b5dc2dbcaab27b324e26f082dd7cc5fbc276db96799d6333f263fea342bcb6608079b5c184f1a479a840b8dbf266db3845e87ec28994bb6c8b893f31c226473f85ac3b66ddc109be58806a486e888f1bd74d42185f508bedbe8671a1bb246d431d48ee68de603c41e88360f305d16b2c0f089ee6f15b1a7a89cb28be707fec6e92c2c60c6fcbafd288c31402f1e91f21bfc611f81ca14d5ce2984ea31612478c8be2df53fc2e615f720ef4e186e6e49a01accf2ebefb88ef5d25940a9696538364cfd1e0b9b67141ba758f85ee0d8ead7cafa4831e200076d6899eef5d2914283473a1ba3d7ca25e774b3bee11d842566995be5cecb8315eae5ef1b0a6b9e2f824583d395eb1c2b5ca5a6ff179e80c4e2321bf535151c45d3cced8250718bb71974b652870de2af8d530a4b49b596525619a50dddacd1d31c7e5639ef345f2521f64e645ad40693227f3468438cd74b3c6b6fd3cb5507c3bf40a334dff94d438398da7f2da62280769290da127bb9e5453c2dd68052845523ff3cea771612541ecb32f59ee0cd0fe2b756c5e7fc354d38b9d1f383975ef4f7c69b3d5ad9908ab4c12754f48c0cbf8faa7db39646f48d8f1a07a8de7388a5adbd96c666280f7a20b5fc9b0a099baea48b9be969c4f167c87575f4585aeb93f025b779aa90ee533d611a76da5ea79c0573bac652743e02cb1e046f21ca5c3cae85e6010407b274cfee82000cf1f0313f7e7b2b8b3219c6c00e89125344f03c7f79cdc35295e2b186935d3a2da66501bf6243958ef0f32d71f041f4cdd10213deb7f9fbc435d760b6a0966b6a671e0ae3a3c1db26663d2f6b0f361773d28099b1634b4e06f7d633a8fe463a7ff2082ba52f49d00bab590a6af052421904da62a7b57cc405dde2c1ece09946269a991fda2e8dfb10e5c996b3a5b75b8eea9695c776aa72e84c702da7fb6f3ecf9333447cfe6a2125e2ca4dfe89e3ac49fd4be8a7f7c59966dd1b25611e00948fe238a62ee4ccc7237cdbcf6ba9a46bb1bcb0444b561683f1688ada93f5d63bf1125714202166e7973b83094f9f809c40ef3475c5895deb2776ec06c1f813433107df535c9ed3ff707251538f9ce06ef0c57fe50398be2494f16a4f12bd2c94adbb590ce4d7722ca32b7fb97b80dc8f1c2daed26a5851396820327774ac0ce5cb97f7ea879275da18495a3efa12856436ed7c08f0d3becc46c496bf75efe2cb0390fedd3f586263ed87bcb965c3f47c4f9b37dcf893b299429662727f2042d94ffbb367b6b200c67a9b3038db92ee77f2f76eb69e30687c306f0beb8c010a122f957db915fcdeeeffc097ac9917cf3a94d657f3842032491b73264ee5d90810536c7ec17a37d2d7151fc260628ef480e713375ba66bce43dd36d1f99b9d9e424b7ecb93fba11cfe7f26b5c29365e859d350064edabb5fc1c028c637cb77f375284dafc420433cf4321c037c21c8a1f2b7baad8d10f2643a287fec71098b38eb778c7424719f8228e9865833c587b285ee994f4a319b501cbc927ebd1b96f6b7eec3c9b345251ea3ada722fe95791c2db027d3a56f6d947ae2cbbe2a2c7d139256261fbb876bfe4afe5f8b56cefe023610f4cc7d560c1bb5f8d039424dc3fd2122b49df73e3b29408a36c4d463c0140fab520e921fafadc5fb52fce6d872fd58de1002525a5f0b8fe26d9f76fac3197ee4b02e2f1d614ae5e6d6f33faae0514e2c9d02fd22cdf13ef5747e913e381c21152dcf2676f7fcd8b5f7e1af40fcd51a1b8133118a3367de28a6cc849f52f92d2de2149209a614054aef545dbe03a4b7ed0694834c45dc84a48b75c5c1ae243c72733656bbe5dda3d14d41659a225d30d4f060dc72dcb988b6034f571badf6e9a728d0bf7b872373907460ec289bc3a49745ad6f6c9782e8583f9ccd5c9b3237a622398f3ca31046199aaee4f7a8bd4e358f7a3043436d04ec331e4dc60deb0357d60c23544590933b69af9d14fb92aff16a00b154c938bfe0778ab5c32952194ed087084f8f759160bdad38806fa6e0a7a23d9625958ac60f5690f6f95ed634465b18f225192c5154792d1466dd8e1d0ee28d6e887fc4386ca28f58029e5ca1ea6479fa90d46733d458e7fdb281116c1dc89486d876bd7773e52fbd422f73c7128938d142f3af974e33925986a96529c2ab9b2a8ee79414c5e19bed748e3d388e45fa18a47f8ef7f8cad95b9ec9bf77a9f034b08e8ebcf2c394ada4f38fa244440c4b0647402096be88fceaf5b9f0426872bccc609885a29a4636f45110f596f49e94872acb5943101e7767454f115a8555e659d2799742621d16cfad989a7508e31d8b22a87e9584d9a527d8fef86390cbfb7dc3d76e7919939c7425c680814940b4314ca5e5f5515e35a54bbae041dd1883cd2d6e33223883bb42b29c9c56087b48ac04b90f6c91cd80bd740cf02d5b66169f5e24632ab1dfcffc1368139f11db60e37ba434bc09a5e5dc1c00c07e56875bb836b914f169992c4abec790bdbf2c5bb435853cb9ca70cc082f3f8752d714db92314d829205eeaa8d1c9f284ad9f1dab88bd9cd7aeab82046cdc6dc6ad590421ce695bd846c765b1893bbebd4a47916aba78b6671e9a443eea0c8a9bec6771ed63aae1f493d8b0c9b3defe71d247c04c572759dd092eea3f5f7f5c8e39d8821e0cd074ffdcf86e33816698c83cebbaca23eaf1c6890a482b1f10ac96f6568bf8f67dc303598d331c0d5cfe89f8b618b7605e64bfeee7a80c510e96a18c7f6af20c9cf8d3e35ed2c91417df1876316a7c0703eb44cbde668b3ea6febd2e682ab8cf071befca0af1a46ca5f10480467896be5eeb79e93607de3f8a5180409118cb4acb4631534935aa8066e1a0e4fdd8fab48ab4b75ae16d1adb964a7385ffcc28049c04b4b105b67c5660673ceadf00601ab5d9fd60b3302106aabbd372c666063384f11391d791123e52a67c6cf4f8bd3f04dc992dc53730e99a527099d39ffef226503da571961851d1390bc48fe4860cae9466e7dcfe49245a218aac8c0a692ad078963b12edc1883352e572897a1c5605bff48c7a9e18202d6e13574036c3b31fba2dffc3d487640944f0d7bb16f07d08773efbd95be277ac6115011472deb0e8b89e545246fd1d505805eb65b7edaeb22139e5cac5571e152d877dd4a707a390881176ad4b6154b85e4f3b5030ece346e0643d645d6f345c3c2a114ffe54c425368d13230d4a2aa79276145be43d95a92a9b5736a39a563e6aff827d2abbd197bce84f96a59834a56baafb4a8a9c639582ddc199018dbd25733cf35c39065250f8750b5db2f16797e4bce128d4adb076d0c1adf03562d24a5a8bd4e2b07c18d053e332b099d31d52a62e735f8ed35745e1fcd4a232190c5a56667d024917aae4c7c4b5c275c01326decf19ba379316b7a82731bd274a9df60a003e86ab4875b1ddf6bbe23c2753deeaa85ae8bae13c7976d8b84402ce93fea5215859988aab6f0d1b07ac931fb1661e436cd160da060ab5b1bd3e91a67c79ee91ee7d83c4be13b1fe22440e56cdb6ed6a6338aedae29567111bbec85a72015f44a5c759375ab65a39f160805acc32e624e029f75ea338d52564bb2f5e58c1591ee57f4de0ca9e8d1dfa3a0fc7a23556e130fce931cfbcdc88b6b611d43f33528a0325f349937f855cd8b33d7e33be39f3737be2f7553ddad1bb132bf28bc918354e09f42f78f6b8241ae3aac5c9c3fb4f89bddd6506dd87bed49fdb756967c63c2e3f77836f5c0aa2f28b2e9879639741358d7253cd74e22877f5f38c7adefa41957fb06b1817db4a0ed2df659d346266f53733ea5d424afbcbe32315b1b65f747bfad7ad179ca71c4a5e5c64afdcfa69b14cef95293fd5e4e805f5c769d2e0badf774a9bba8ea0f0c4aaf019e9cf6f511b5889d9ca7e083e78c06c2e842bca44aaa9fc61ea9cb356e4f0463c53c6f226ffbcc7d64fd1e546034d42f8072d47f7496308b8375bc72977bbb84caeb0c744849d6ceca2fbc862d8cf812ddcdfbcc4c5e7f48cc247ce5325f217669c9d828dea4402e68083e3b2b1362271da6fd85b4361c0b71c9bcaee04b85d569a1e3f3c81323799c8a3920f6abe7e00f434c37dbcb469befcb3b5d7458a28101ad502c176a8cbeb28f239cc3bf418dbcdfca08a9d7e83c4b4c5f9ed863af75b245f8beb7a6a2d70e1f8e9893a3445a1aff7c04749a5b35cbaa1357dac55c6407867d4c2c40ace2ef2f9998bce8c6768bef633777bfa548a89e0f49bb76dd618ee38a20a75070a615352b5d2adfbe59e0fe3df9dd7c6a10f8b9874c420b4e7b00d6", ['\x00']}, 0x1120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100), 0x20000000000001bd, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) write$binfmt_aout(r2, &(0x7f0000000740)={{0x10b, 0xff, 0x3, 0x248, 0x2e8, 0x81, 0x19d}, "37a445b225e89d0697b29c919029d21ab1c1af947dfabb4e0a3577656f222ff03ad44a887fb162c37e180ec2f1af8e8d49c1b7af28c1e9b95da15b2dc2a81e9dada26f1b40e4de3b849af489e36933f3a2e4dfb0678648dcabafedb2e836e818acbe2f4738f195d40b55aedcc699310a58cf5f220aeea4590d460134842bf4b2b3e810364630d4793853e79f81b46ac6b3a0a2cfc18cc43fab26a5227d6a0da5de69a70abd2e2014c558d6cc2034fc884d4a8eeb9790c72a45031d6ac5b9988304b06deed0057f3237cf87eb151f2a2f40c9eb5cb9d5e370c4b212137867f7b67ac76e792a02325dba4cc4aeb6e28973190199a9e540d9f42812d3c7a7c7355ea71df5fad78fb339dfaa53c77067687fe3b308b7acae1b6163acc5a5607d08590b7eb6038ba886434376f1871cd5fa4bf4e6f6b743fa2601d367e8cd0e03ff41eae79a18b5c150eb22aeac2ec9b2eb68e570441aad8bd21e889d1be95bdb5fc775d813cd50995ae1119f6c14949532be4eb0185460041705745c6ecf9cf8583eeed01c15af967c50e856d0920d6d8ca15fdc5a6b27eb07deb756b05eb2be1594968d7fceda31090025d6d5159cc964d9a776fa68b59c12caf92f4cae12a991eb576cdadf01efca1212ae87338cb8d30701682b50be088082fc32acad0b7204cecf201be1e72d9c45115a57e5620e075ecb0b52e6c815edca834e0c0677dc6e474c7b127b5a0232b3993dad3ec7839abf9e6b7794456b1a8f58c99d49ba86fea21fe5b2d98d469989fca69bf41d77d4aa612b9c209e047faed860553720fedfc00c820d95314e82a8098d87e4df34c1f95c4ea35a818ce0ee72ae66b0a72128230c2a2269024a916ad1242fab132ef51188246c91c70ce865178804db37c3856d9398399706c3c8961d831f607e2a86a200a57f44d6994fdaf14384933b2c0b3943cff79b5006268c78ace094c7e6b1b878753de655220eb4b01288be4b85e21098d6be32594a701d20a80b124743b3eabab78ee5cda548d85913e30c5f806a87ef119e72819381b9d5e4d12e617539b86e71efdd6eab6d476bb67cd44f70b4e6c872150f14e82ab3235a1a2d3a7365bb92da66aa0b212d78b7b6a772f75f069f700b594799c59d515ee0b4b368e5b53e6b0b416baf71b75d3b0eb9135c152d4f71cfa5c623d0613afa9d0e0b19a971f9c2a62bf2d50a42aabadc542fab1492681751487be934c5bf98c676d6170fa00bd614e1cf181eacf51696c990291b8701903f28f73a4e502cdb090f20b1310e7a538a507c922dc59bfd05512d637e6b70899abd3506268471899d714d462694f0aa88e9a5272324ae2a94963b7027ad27908c438e7faf041f531c271c537d4331c1b12b1e37714fe5798e77a70ba082a2bad6cd3e7b4af5302f2aa6f079eb22ca644a7dc55d8972390f864284ec7709cf45ed40c90e77ac921e41cc199eb4495b5dc2dbcaab27b324e26f082dd7cc5fbc276db96799d6333f263fea342bcb6608079b5c184f1a479a840b8dbf266db3845e87ec28994bb6c8b893f31c226473f85ac3b66ddc109be58806a486e888f1bd74d42185f508bedbe8671a1bb246d431d48ee68de603c41e88360f305d16b2c0f089ee6f15b1a7a89cb28be707fec6e92c2c60c6fcbafd288c31402f1e91f21bfc611f81ca14d5ce2984ea31612478c8be2df53fc2e615f720ef4e186e6e49a01accf2ebefb88ef5d25940a9696538364cfd1e0b9b67141ba758f85ee0d8ead7cafa4831e200076d6899eef5d2914283473a1ba3d7ca25e774b3bee11d842566995be5cecb8315eae5ef1b0a6b9e2f824583d395eb1c2b5ca5a6ff179e80c4e2321bf535151c45d3cced8250718bb71974b652870de2af8d530a4b49b596525619a50dddacd1d31c7e5639ef345f2521f64e645ad40693227f3468438cd74b3c6b6fd3cb5507c3bf40a334dff94d438398da7f2da62280769290da127bb9e5453c2dd68052845523ff3cea771612541ecb32f59ee0cd0fe2b756c5e7fc354d38b9d1f383975ef4f7c69b3d5ad9908ab4c12754f48c0cbf8faa7db39646f48d8f1a07a8de7388a5adbd96c666280f7a20b5fc9b0a099baea48b9be969c4f167c87575f4585aeb93f025b779aa90ee533d611a76da5ea79c0573bac652743e02cb1e046f21ca5c3cae85e6010407b274cfee82000cf1f0313f7e7b2b8b3219c6c00e89125344f03c7f79cdc35295e2b186935d3a2da66501bf6243958ef0f32d71f041f4cdd10213deb7f9fbc435d760b6a0966b6a671e0ae3a3c1db26663d2f6b0f361773d28099b1634b4e06f7d633a8fe463a7ff2082ba52f49d00bab590a6af052421904da62a7b57cc405dde2c1ece09946269a991fda2e8dfb10e5c996b3a5b75b8eea9695c776aa72e84c702da7fb6f3ecf9333447cfe6a2125e2ca4dfe89e3ac49fd4be8a7f7c59966dd1b25611e00948fe238a62ee4ccc7237cdbcf6ba9a46bb1bcb0444b561683f1688ada93f5d63bf1125714202166e7973b83094f9f809c40ef3475c5895deb2776ec06c1f813433107df535c9ed3ff707251538f9ce06ef0c57fe50398be2494f16a4f12bd2c94adbb590ce4d7722ca32b7fb97b80dc8f1c2daed26a5851396820327774ac0ce5cb97f7ea879275da18495a3efa12856436ed7c08f0d3becc46c496bf75efe2cb0390fedd3f586263ed87bcb965c3f47c4f9b37dcf893b299429662727f2042d94ffbb367b6b200c67a9b3038db92ee77f2f76eb69e30687c306f0beb8c010a122f957db915fcdeeeffc097ac9917cf3a94d657f3842032491b73264ee5d90810536c7ec17a37d2d7151fc260628ef480e713375ba66bce43dd36d1f99b9d9e424b7ecb93fba11cfe7f26b5c29365e859d350064edabb5fc1c028c637cb77f375284dafc420433cf4321c037c21c8a1f2b7baad8d10f2643a287fec71098b38eb778c7424719f8228e9865833c587b285ee994f4a319b501cbc927ebd1b96f6b7eec3c9b345251ea3ada722fe95791c2db027d3a56f6d947ae2cbbe2a2c7d139256261fbb876bfe4afe5f8b56cefe023610f4cc7d560c1bb5f8d039424dc3fd2122b49df73e3b29408a36c4d463c0140fab520e921fafadc5fb52fce6d872fd58de1002525a5f0b8fe26d9f76fac3197ee4b02e2f1d614ae5e6d6f33faae0514e2c9d02fd22cdf13ef5747e913e381c21152dcf2676f7fcd8b5f7e1af40fcd51a1b8133118a3367de28a6cc849f52f92d2de2149209a614054aef545dbe03a4b7ed0694834c45dc84a48b75c5c1ae243c72733656bbe5dda3d14d41659a225d30d4f060dc72dcb988b6034f571badf6e9a728d0bf7b872373907460ec289bc3a49745ad6f6c9782e8583f9ccd5c9b3237a622398f3ca31046199aaee4f7a8bd4e358f7a3043436d04ec331e4dc60deb0357d60c23544590933b69af9d14fb92aff16a00b154c938bfe0778ab5c32952194ed087084f8f759160bdad38806fa6e0a7a23d9625958ac60f5690f6f95ed634465b18f225192c5154792d1466dd8e1d0ee28d6e887fc4386ca28f58029e5ca1ea6479fa90d46733d458e7fdb281116c1dc89486d876bd7773e52fbd422f73c7128938d142f3af974e33925986a96529c2ab9b2a8ee79414c5e19bed748e3d388e45fa18a47f8ef7f8cad95b9ec9bf77a9f034b08e8ebcf2c394ada4f38fa244440c4b0647402096be88fceaf5b9f0426872bccc609885a29a4636f45110f596f49e94872acb5943101e7767454f115a8555e659d2799742621d16cfad989a7508e31d8b22a87e9584d9a527d8fef86390cbfb7dc3d76e7919939c7425c680814940b4314ca5e5f5515e35a54bbae041dd1883cd2d6e33223883bb42b29c9c56087b48ac04b90f6c91cd80bd740cf02d5b66169f5e24632ab1dfcffc1368139f11db60e37ba434bc09a5e5dc1c00c07e56875bb836b914f169992c4abec790bdbf2c5bb435853cb9ca70cc082f3f8752d714db92314d829205eeaa8d1c9f284ad9f1dab88bd9cd7aeab82046cdc6dc6ad590421ce695bd846c765b1893bbebd4a47916aba78b6671e9a443eea0c8a9bec6771ed63aae1f493d8b0c9b3defe71d247c04c572759dd092eea3f5f7f5c8e39d8821e0cd074ffdcf86e33816698c83cebbaca23eaf1c6890a482b1f10ac96f6568bf8f67dc303598d331c0d5cfe89f8b618b7605e64bfeee7a80c510e96a18c7f6af20c9cf8d3e35ed2c91417df1876316a7c0703eb44cbde668b3ea6febd2e682ab8cf071befca0af1a46ca5f10480467896be5eeb79e93607de3f8a5180409118cb4acb4631534935aa8066e1a0e4fdd8fab48ab4b75ae16d1adb964a7385ffcc28049c04b4b105b67c5660673ceadf00601ab5d9fd60b3302106aabbd372c666063384f11391d791123e52a67c6cf4f8bd3f04dc992dc53730e99a527099d39ffef226503da571961851d1390bc48fe4860cae9466e7dcfe49245a218aac8c0a692ad078963b12edc1883352e572897a1c5605bff48c7a9e18202d6e13574036c3b31fba2dffc3d487640944f0d7bb16f07d08773efbd95be277ac6115011472deb0e8b89e545246fd1d505805eb65b7edaeb22139e5cac5571e152d877dd4a707a390881176ad4b6154b85e4f3b5030ece346e0643d645d6f345c3c2a114ffe54c425368d13230d4a2aa79276145be43d95a92a9b5736a39a563e6aff827d2abbd197bce84f96a59834a56baafb4a8a9c639582ddc199018dbd25733cf35c39065250f8750b5db2f16797e4bce128d4adb076d0c1adf03562d24a5a8bd4e2b07c18d053e332b099d31d52a62e735f8ed35745e1fcd4a232190c5a56667d024917aae4c7c4b5c275c01326decf19ba379316b7a82731bd274a9df60a003e86ab4875b1ddf6bbe23c2753deeaa85ae8bae13c7976d8b84402ce93fea5215859988aab6f0d1b07ac931fb1661e436cd160da060ab5b1bd3e91a67c79ee91ee7d83c4be13b1fe22440e56cdb6ed6a6338aedae29567111bbec85a72015f44a5c759375ab65a39f160805acc32e624e029f75ea338d52564bb2f5e58c1591ee57f4de0ca9e8d1dfa3a0fc7a23556e130fce931cfbcdc88b6b611d43f33528a0325f349937f855cd8b33d7e33be39f3737be2f7553ddad1bb132bf28bc918354e09f42f78f6b8241ae3aac5c9c3fb4f89bddd6506dd87bed49fdb756967c63c2e3f77836f5c0aa2f28b2e9879639741358d7253cd74e22877f5f38c7adefa41957fb06b1817db4a0ed2df659d346266f53733ea5d424afbcbe32315b1b65f747bfad7ad179ca71c4a5e5c64afdcfa69b14cef95293fd5e4e805f5c769d2e0badf774a9bba8ea0f0c4aaf019e9cf6f511b5889d9ca7e083e78c06c2e842bca44aaa9fc61ea9cb356e4f0463c53c6f226ffbcc7d64fd1e546034d42f8072d47f7496308b8375bc72977bbb84caeb0c744849d6ceca2fbc862d8cf812ddcdfbcc4c5e7f48cc247ce5325f217669c9d828dea4402e68083e3b2b1362271da6fd85b4361c0b71c9bcaee04b85d569a1e3f3c81323799c8a3920f6abe7e00f434c37dbcb469befcb3b5d7458a28101ad502c176a8cbeb28f239cc3bf418dbcdfca08a9d7e83c4b4c5f9ed863af75b245f8beb7a6a2d70e1f8e9893a3445a1aff7c04749a5b35cbaa1357dac55c6407867d4c2c40ace2ef2f9998bce8c6768bef633777bfa548a89e0f49bb76dd618ee38a20a75070a615352b5d2adfbe59e0fe3df9dd7c6a10f8b9874c420b4e7b00d6", ['\x00']}, 0x1120) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100), 0x20000000000001bd, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) write$binfmt_aout(r2, &(0x7f0000000740)={{0x10b, 0xff, 0x3, 0x248, 0x2e8, 0x81, 0x19d}, "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", ['\x00']}, 0x1120) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x7fff, 0x80, 0x3f, 0x5, "a200d64c2d7222968ea11fe5c8967ebd228554"}) 14:12:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x7fff, 0x80, 0x3f, 0x5, "a200d64c2d7222968ea11fe5c8967ebd228554"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x7fff, 0x80, 0x3f, 0x5, "a200d64c2d7222968ea11fe5c8967ebd228554"}) (async) 14:12:38 executing program 5: setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x4}, 0x8) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x5, 0xffffffffffffffff, 0x1}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000000c0)=""/131) (async) dup2(r0, r2) 14:12:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x7fff, 0x80, 0x3f, 0x5, "a200d64c2d7222968ea11fe5c8967ebd228554"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0), 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) openat$ptmx(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) (async) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000080)={0x0, 0x7fff, 0x80, 0x3f, 0x5, "a200d64c2d7222968ea11fe5c8967ebd228554"}) (async) [ 3439.743263][T13065] ptm ptm1: ldisc open failed (-12), clearing slot 1 14:12:38 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x3) 14:12:38 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x2c00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:38 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x4e, &(0x7f0000000040)="c15218bb00010000cbfaa16aac3e860cb894763c296e99c20a663ff907d901000000916c4d49ccbe60fad8cd24cf34e5b7611b10a4afb3ef60bea528fc1cdd78b661b4055e42d5cc947401a1c925", 0x11c, 0x0, &(0x7f0000000280)="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"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRESDEC=r4], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) close_range(r1, r6, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c630c20"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x4e, &(0x7f0000000040)="c15218bb00010000cbfaa16aac3e860cb894763c296e99c20a663ff907d901000000916c4d49ccbe60fad8cd24cf34e5b7611b10a4afb3ef60bea528fc1cdd78b661b4055e42d5cc947401a1c925", 0x11c, 0x0, &(0x7f0000000280)="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"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRESDEC=r4], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) close_range(r1, r6, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c630c20"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x4e, &(0x7f0000000040)="c15218bb00010000cbfaa16aac3e860cb894763c296e99c20a663ff907d901000000916c4d49ccbe60fad8cd24cf34e5b7611b10a4afb3ef60bea528fc1cdd78b661b4055e42d5cc947401a1c925", 0x11c, 0x0, &(0x7f0000000280)="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"}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r3) (async) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRESDEC=r4], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r5) (async) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) close_range(r1, r6, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c630c20"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) [ 3440.193299][T13085] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="bea253b2a34e570f7dfcd4013bdfc615b587022598855514346d4af6c8ad40bd15e851a580c013eede9b2658bf0ea87aa7ca0fc96b2b719d171a687e48f7de0b933d74afb8fadd36a96fd39143db347f6f1227d7b125d9a8199d08704c4e0bde2a7437de5a5af5062b0822121b30d00ca51616a11e12e9b090281ce266c6506ed33cce6db2a0e74a49b693a3fa78f33e054b955b85486812360086f4de97daf04596e5f3d10355f4d7c82a61441e281fe1813d8202e2682a9d5477af910443452eeb85a56d5f732a1e4c94dcf132cd40e8cf4771350adee123b3", 0xda}, {&(0x7f00000001c0)="5243abcc58a45ded13d259ff9e907cee0a40e15439a2a15c08fbe040b99fe361a80c8c8946205dcb29c1532de8b33bc67f883806de7ff77a550e6ce453f0c19af57db26f1e38bbee8fa0a81a0c1515ace3c2be97fda8abe5cd5d48b4cba40542c7766f16a9d1653391228770cdde5b06e699bed02b5323776a0a066de7f3ed9fd9d4d2fa67e60a6365ed5a20d1687b0012057796d7dae219e3c276620d4656c896e4cbaca08009932f98b8fb0a40c8", 0xaf}, {&(0x7f0000000280)="64d9ee62e7f10780d6ef2b2b67ba7e088390745fee", 0x15}, {&(0x7f00000002c0)="3bafbf8a5de058986c85e79e930ba132fa1e9b99a297471d063d3ec076206feeee410f76c28e628a6e8ab99e94a55a5496ac0d85f371f3acad6a06b2837505b7fc61accb2b0da973b0f3b3de59e5fb34163dadd95a6bad92b166a142c7305ecbd7839fdc66ad5ec481011111f24f952ae7be0a469eee016bb4b1478a66a8", 0x7e}], 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x7], 0x0, 0x0) 14:12:39 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xf298}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) (async) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x4e, &(0x7f0000000040)="c15218bb00010000cbfaa16aac3e860cb894763c296e99c20a663ff907d901000000916c4d49ccbe60fad8cd24cf34e5b7611b10a4afb3ef60bea528fc1cdd78b661b4055e42d5cc947401a1c925", 0x11c, 0x0, &(0x7f0000000280)="e00ba4b20b147c20831c0277518ef0b4f75733c3655435004d209ff7dfaeece67cc431cc2171f74c949fa68b3baa64d90c2edf59dab59cf41dfd065f5b33f9d9025a256c0c1c59614ef498a8d681f987b63667689f70e4a7b7284f3253aa637c28abe83de360f6730f5fb59f5094413d6b4a7fe0af5413a0f9219b2fd05f314335f6c9254bb196fd322d9c887ea5ba3f69b368300b7d7a728e31d8701d04dcb2b2e567fd61dd05dc45420f623dd0eeec65c80fe1fa858c451dc1cfeda242a77f1d100a69aad50fc0de0cde419ffe738afe04ce20edc74f6d997395d88ea9cc952ff08dd75629aa1bc19b85948f5991c4711af0df87065aedbf63cdc6e2a2dfad95b34992845fc688a8ce1785fefbb0eaac0763d84c7f768a6348894f"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES32=r2, @ANYRESDEC=r3, @ANYRESDEC=r4], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) close_range(r1, r6, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1c630c20"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3440.418225][T13085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04634040afdf671bc5af5439e4fe91b0c4e82c47bfb16753d0eea7dec431bdb730a4752d61afee16da5766b0135251cd81c529217a027700a29383a12126fb0d40980666a6221e7d58ae6c888feb3c4298973a967ab30415491fabd931875a049ba6d90f24da286ff1b4d1a2da62aa04109a9f8c234a84b57c654613d846fa4342c58b8d23646107dde7b8244fb7a3af438b465857f6ed0f7eac60032a34"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="bea253b2a34e570f7dfcd4013bdfc615b587022598855514346d4af6c8ad40bd15e851a580c013eede9b2658bf0ea87aa7ca0fc96b2b719d171a687e48f7de0b933d74afb8fadd36a96fd39143db347f6f1227d7b125d9a8199d08704c4e0bde2a7437de5a5af5062b0822121b30d00ca51616a11e12e9b090281ce266c6506ed33cce6db2a0e74a49b693a3fa78f33e054b955b85486812360086f4de97daf04596e5f3d10355f4d7c82a61441e281fe1813d8202e2682a9d5477af910443452eeb85a56d5f732a1e4c94dcf132cd40e8cf4771350adee123b3", 0xda}, {&(0x7f00000001c0)="5243abcc58a45ded13d259ff9e907cee0a40e15439a2a15c08fbe040b99fe361a80c8c8946205dcb29c1532de8b33bc67f883806de7ff77a550e6ce453f0c19af57db26f1e38bbee8fa0a81a0c1515ace3c2be97fda8abe5cd5d48b4cba40542c7766f16a9d1653391228770cdde5b06e699bed02b5323776a0a066de7f3ed9fd9d4d2fa67e60a6365ed5a20d1687b0012057796d7dae219e3c276620d4656c896e4cbaca08009932f98b8fb0a40c8", 0xaf}, {&(0x7f0000000280)="64d9ee62e7f10780d6ef2b2b67ba7e088390745fee", 0x15}, {&(0x7f00000002c0)="3bafbf8a5de058986c85e79e930ba132fa1e9b99a297471d063d3ec076206feeee410f76c28e628a6e8ab99e94a55a5496ac0d85f371f3acad6a06b2837505b7fc61accb2b0da973b0f3b3de59e5fb34163dadd95a6bad92b166a142c7305ecbd7839fdc66ad5ec481011111f24f952ae7be0a469eee016bb4b1478a66a8", 0x7e}], 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04634040afdf671bc5af5439e4fe91b0c4e82c47bfb16753d0eea7dec431bdb730a4752d61afee16da5766b0135251cd81c529217a027700a29383a12126fb0d40980666a6221e7d58ae6c888feb3c4298973a967ab30415491fabd931875a049ba6d90f24da286ff1b4d1a2da62aa04109a9f8c234a84b57c654613d846fa4342c58b8d23646107dde7b8244fb7a3af438b465857f6ed0f7eac60032a34"], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 64) dup3(r2, r0, 0x0) (async, rerun: 64) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (rerun: 32) [ 3440.641956][T13109] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="04634040afdf671bc5af5439e4fe91b0c4e82c47bfb16753d0eea7dec431bdb730a4752d61afee16da5766b0135251cd81c529217a027700a29383a12126fb0d40980666a6221e7d58ae6c888feb3c4298973a967ab30415491fabd931875a049ba6d90f24da286ff1b4d1a2da62aa04109a9f8c234a84b57c654613d846fa4342c58b8d23646107dde7b8244fb7a3af438b465857f6ed0f7eac60032a34"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000000c0)="bea253b2a34e570f7dfcd4013bdfc615b587022598855514346d4af6c8ad40bd15e851a580c013eede9b2658bf0ea87aa7ca0fc96b2b719d171a687e48f7de0b933d74afb8fadd36a96fd39143db347f6f1227d7b125d9a8199d08704c4e0bde2a7437de5a5af5062b0822121b30d00ca51616a11e12e9b090281ce266c6506ed33cce6db2a0e74a49b693a3fa78f33e054b955b85486812360086f4de97daf04596e5f3d10355f4d7c82a61441e281fe1813d8202e2682a9d5477af910443452eeb85a56d5f732a1e4c94dcf132cd40e8cf4771350adee123b3", 0xda}, {&(0x7f00000001c0)="5243abcc58a45ded13d259ff9e907cee0a40e15439a2a15c08fbe040b99fe361a80c8c8946205dcb29c1532de8b33bc67f883806de7ff77a550e6ce453f0c19af57db26f1e38bbee8fa0a81a0c1515ace3c2be97fda8abe5cd5d48b4cba40542c7766f16a9d1653391228770cdde5b06e699bed02b5323776a0a066de7f3ed9fd9d4d2fa67e60a6365ed5a20d1687b0012057796d7dae219e3c276620d4656c896e4cbaca08009932f98b8fb0a40c8", 0xaf}, {&(0x7f0000000280)="64d9ee62e7f10780d6ef2b2b67ba7e088390745fee", 0x15}, {&(0x7f00000002c0)="3bafbf8a5de058986c85e79e930ba132fa1e9b99a297471d063d3ec076206feeee410f76c28e628a6e8ab99e94a55a5496ac0d85f371f3acad6a06b2837505b7fc61accb2b0da973b0f3b3de59e5fb34163dadd95a6bad92b166a142c7305ecbd7839fdc66ad5ec481011111f24f952ae7be0a469eee016bb4b1478a66a8", 0x7e}], 0x4) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x80100) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:39 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x80100) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) (async) syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x80100) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000140), 0x80, 0x0) (async, rerun: 64) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0x80100) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async, rerun: 32) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:40 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x4) 14:12:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x80) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x8, 0x8, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x64, 0x0, 0x20, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ssrr={0x89, 0x23, 0x9c, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @loopback, @multicast1, @remote, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x9, "89d50a2598e460"}, @lsrr={0x83, 0xf, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x7, 0x88, [@broadcast]}]}}}}}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "bccd1d73a597dcce578198c2cf3048c4ff65bdcf3b0f3267389382d392737f110f5ab95212681d7648f293c220c34c8817a40eb694a0c8b8530257a4d40c5df2b02c0a049f2561247c9da4b7b2737195243174"}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "e59b85d4e0e293cc8e2fd3a8219900e7a2484fbef4cc9e18ef890aaa438b08d0f3abc8eee5ddd2448067e384c84bfcc7c8d210359cc372dea318f6d3c707c32772bb0738bb69f2c162bce202be7a7b3f12b50ed7ba2da65c74b8efdbf73fc10a629ac1685fab9f348bd91a15e2bea08c7e4151961ae167b201de07831b0516c311c7b30a3f1f42eff5c3ba85cbe24379e68069b0d0793b1de5a1b85df7b672c9e43e9a322571a213c2e0d036"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) dup2(r0, r2) 14:12:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x80) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x8, 0x8, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x64, 0x0, 0x20, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ssrr={0x89, 0x23, 0x9c, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @loopback, @multicast1, @remote, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x9, "89d50a2598e460"}, @lsrr={0x83, 0xf, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x7, 0x88, [@broadcast]}]}}}}}) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "bccd1d73a597dcce578198c2cf3048c4ff65bdcf3b0f3267389382d392737f110f5ab95212681d7648f293c220c34c8817a40eb694a0c8b8530257a4d40c5df2b02c0a049f2561247c9da4b7b2737195243174"}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "e59b85d4e0e293cc8e2fd3a8219900e7a2484fbef4cc9e18ef890aaa438b08d0f3abc8eee5ddd2448067e384c84bfcc7c8d210359cc372dea318f6d3c707c32772bb0738bb69f2c162bce202be7a7b3f12b50ed7ba2da65c74b8efdbf73fc10a629ac1685fab9f348bd91a15e2bea08c7e4151961ae167b201de07831b0516c311c7b30a3f1f42eff5c3ba85cbe24379e68069b0d0793b1de5a1b85df7b672c9e43e9a322571a213c2e0d036"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) dup2(r0, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x80) (async) dup(r3) (async) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x8, 0x8, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x64, 0x0, 0x20, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ssrr={0x89, 0x23, 0x9c, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @loopback, @multicast1, @remote, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x9, "89d50a2598e460"}, @lsrr={0x83, 0xf, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x7, 0x88, [@broadcast]}]}}}}}) (async) creat(&(0x7f0000000100)='./file0\x00', 0x8) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "bccd1d73a597dcce578198c2cf3048c4ff65bdcf3b0f3267389382d392737f110f5ab95212681d7648f293c220c34c8817a40eb694a0c8b8530257a4d40c5df2b02c0a049f2561247c9da4b7b2737195243174"}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "e59b85d4e0e293cc8e2fd3a8219900e7a2484fbef4cc9e18ef890aaa438b08d0f3abc8eee5ddd2448067e384c84bfcc7c8d210359cc372dea318f6d3c707c32772bb0738bb69f2c162bce202be7a7b3f12b50ed7ba2da65c74b8efdbf73fc10a629ac1685fab9f348bd91a15e2bea08c7e4151961ae167b201de07831b0516c311c7b30a3f1f42eff5c3ba85cbe24379e68069b0d0793b1de5a1b85df7b672c9e43e9a322571a213c2e0d036"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) dup2(r0, r2) (async) 14:12:40 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3000, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1405, 0x200, 0x70bd26, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x805) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x8], 0x0, 0x0) 14:12:40 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1405, 0x200, 0x70bd26, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x805) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:41 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xf841}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x80) (async) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x8, 0x8, {{0x16, 0x4, 0x3, 0x3, 0x58, 0x64, 0x0, 0x20, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1d}, {[@ssrr={0x89, 0x23, 0x9c, [@dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010101, @loopback, @multicast1, @remote, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x9, "89d50a2598e460"}, @lsrr={0x83, 0xf, 0x9c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0x7, 0x88, [@broadcast]}]}}}}}) (async) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x19c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "bccd1d73a597dcce578198c2cf3048c4ff65bdcf3b0f3267389382d392737f110f5ab95212681d7648f293c220c34c8817a40eb694a0c8b8530257a4d40c5df2b02c0a049f2561247c9da4b7b2737195243174"}, @ETHTOOL_A_BITSET_VALUE={0xb0, 0x4, "e59b85d4e0e293cc8e2fd3a8219900e7a2484fbef4cc9e18ef890aaa438b08d0f3abc8eee5ddd2448067e384c84bfcc7c8d210359cc372dea318f6d3c707c32772bb0738bb69f2c162bce202be7a7b3f12b50ed7ba2da65c74b8efdbf73fc10a629ac1685fab9f348bd91a15e2bea08c7e4151961ae167b201de07831b0516c311c7b30a3f1f42eff5c3ba85cbe24379e68069b0d0793b1de5a1b85df7b672c9e43e9a322571a213c2e0d036"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async) dup2(r0, r2) 14:12:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x1405, 0x200, 0x70bd26, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x805) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3442.212059][T13167] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:41 executing program 3: getpeername$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e348e75"], 0x0, 0x1000000000000, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001740)={0xc4, 0x0, &(0x7f00000005c0)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x40000000000000, 0x2, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/104, 0x68, 0x0, 0x8}, @fda={0x66646185, 0x1, 0x2, 0x2}}, &(0x7f00000003c0)={0x0, 0x1c, 0x44}}}, @acquire, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0xfffffffd}, @decrefs, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0x3b}, @flat=@handle={0x73682a85, 0x110a}, @flat=@binder={0x73622a85, 0x10a, 0x2}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}], 0xd, 0x0, &(0x7f00000006c0)="26f0f0567c9fd558b839a9f136"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="f197ea553edc8ab31370a01baf19d89ed5a78ff1cf665eb8babbabacb660c925bb33b6c77ebd803c4368d5fe5f7d3ea3f6b1fc336fde7237813745a5983824e2b4692f9b8a30afea57d15769c004bed3a6535476e4fd921d42e63cc0dd2962795d1b06be97082886eac77e103dc0f069bf02b9d061bf5ea78b46f53b680d1f78269cf64fa9429eae1575e2cf787a6b28d91eccbc51538cad01fc4016c63a5a0cfc98fd2514559dc41f95ce492fde11cd1cea1a66f63a8da6f7b55c3073e927f6b6b8a0dd53cc3cef1c2c47565fafc4f403781634d02907079919596f4604f0770e647df0bbca6c197ebaa1f7efc911bfb9d9d91835052a5066bd10e8c4c2816cc6b217480d39c01e093eda766c4997b7a3ca6a800189e5b8956005e17e4d66c0a4e8432a1965c2b97a4407383e891234510b3794473d6cedbca2e27322d8c99b01a18928766d60c82ffad2d67a7a3d52712970899a7e936cf8eed15b1095bb0b8b9c90ff88"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3442.451458][T13167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:41 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x7) 14:12:41 executing program 5: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) signalfd4(r2, &(0x7f0000000000)={[0x81, 0x1000a77]}, 0x8, 0x1c0800) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) r7 = openat$cgroup_pressure(r4, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 14:12:41 executing program 3: getpeername$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) (async, rerun: 64) dup3(r1, r0, 0x0) (rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e348e75"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x2, 0x0) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) dup(r2) (async) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001740)={0xc4, 0x0, &(0x7f00000005c0)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x40000000000000, 0x2, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/104, 0x68, 0x0, 0x8}, @fda={0x66646185, 0x1, 0x2, 0x2}}, &(0x7f00000003c0)={0x0, 0x1c, 0x44}}}, @acquire, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0xfffffffd}, @decrefs, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0x3b}, @flat=@handle={0x73682a85, 0x110a}, @flat=@binder={0x73622a85, 0x10a, 0x2}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}], 0xd, 0x0, &(0x7f00000006c0)="26f0f0567c9fd558b839a9f136"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3442.533682][T13184] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:41 executing program 3: getpeername$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x10) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e348e75"], 0x0, 0x1000000000000, 0x0}) (async) openat$binderfs(0xffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00', 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) (async) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001740)={0xc4, 0x0, &(0x7f00000005c0)=[@release={0x40046306, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x40000000000000, 0x2, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/104, 0x68, 0x0, 0x8}, @fda={0x66646185, 0x1, 0x2, 0x2}}, &(0x7f00000003c0)={0x0, 0x1c, 0x44}}}, @acquire, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0xfffffffd}, @decrefs, @enter_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x2, 0x3b}, @flat=@handle={0x73682a85, 0x110a}, @flat=@binder={0x73622a85, 0x10a, 0x2}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x1000}], 0xd, 0x0, &(0x7f00000006c0)="26f0f0567c9fd558b839a9f136"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:41 executing program 5: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) signalfd4(r2, &(0x7f0000000000)={[0x81, 0x1000a77]}, 0x8, 0x1c0800) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) r7 = openat$cgroup_pressure(r4, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 14:12:41 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r1, r2, 0x0) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r1, r2, 0x0) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0xa], 0x0, 0x0) 14:12:42 executing program 5: fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x8, 0xffffffffffffffff}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) signalfd4(r2, &(0x7f0000000000)={[0x81, 0x1000a77]}, 0x8, 0x1c0800) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) (async) r7 = openat$cgroup_pressure(r4, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) (async) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 14:12:42 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) dup3(r1, r2, 0x0) (async) dup3(r1, r2, 0x0) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:42 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3312, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x2}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004050) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) dup2(r0, r2) [ 3443.779965][T13233] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x2}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004050) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) dup2(r0, r2) 14:12:42 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x8) [ 3443.994279][T13233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:42 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xf0ffff}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3444.290811][T13245] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0xf], 0x0, 0x0) 14:12:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_getneigh={0x28, 0x1e, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x1000, 0x2}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004050) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) dup2(r0, r2) 14:12:43 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r3, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x40046207, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r8, r7) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r10 = dup3(r7, r9, 0x0) r11 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000040)=[@register_looper, @free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x2}, @acquire_done, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}], 0xd8, 0x0, &(0x7f0000000140)="5c3b98a43a2ed8f82421896c60505b7490de30bc40cd40bd7c1f2b0ceb295dfd2a0b43437988334d7a3787375d4c52f6ab9c6c17976be4284669cad052212fc0c5c75f609e1c33bcf1f67377630325ba9a5fa6e8aaa1f2f60dc374e753cdf2780ba61776b276572051a60e3b897b5002f4fd11fbc21034cbd2ff56b9338dc6dc2b5f8e1901965cc7f526da7cd866364fb3cb13bf0bf0ddf94bda290d2fc1d8d4404e12f326fb77b0522ca7788beeff74e21fd0f3af717bc656c96bfc0149531bbc3e81568f9183eb999538e2a2ae5d389ab04ca281a961b2"}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:43 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r3, r2) (async) dup2(r3, r2) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = dup3(r2, r4, 0x0) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x40046207, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r8, r7) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r10 = dup3(r7, r9, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) (async) r11 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000040)=[@register_looper, @free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x2}, @acquire_done, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}], 0xd8, 0x0, &(0x7f0000000140)="5c3b98a43a2ed8f82421896c60505b7490de30bc40cd40bd7c1f2b0ceb295dfd2a0b43437988334d7a3787375d4c52f6ab9c6c17976be4284669cad052212fc0c5c75f609e1c33bcf1f67377630325ba9a5fa6e8aaa1f2f60dc374e753cdf2780ba61776b276572051a60e3b897b5002f4fd11fbc21034cbd2ff56b9338dc6dc2b5f8e1901965cc7f526da7cd866364fb3cb13bf0bf0ddf94bda290d2fc1d8d4404e12f326fb77b0522ca7788beeff74e21fd0f3af717bc656c96bfc0149531bbc3e81568f9183eb999538e2a2ae5d389ab04ca281a961b2"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000040)=[@register_looper, @free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x2}, @acquire_done, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}], 0xd8, 0x0, &(0x7f0000000140)="5c3b98a43a2ed8f82421896c60505b7490de30bc40cd40bd7c1f2b0ceb295dfd2a0b43437988334d7a3787375d4c52f6ab9c6c17976be4284669cad052212fc0c5c75f609e1c33bcf1f67377630325ba9a5fa6e8aaa1f2f60dc374e753cdf2780ba61776b276572051a60e3b897b5002f4fd11fbc21034cbd2ff56b9338dc6dc2b5f8e1901965cc7f526da7cd866364fb3cb13bf0bf0ddf94bda290d2fc1d8d4404e12f326fb77b0522ca7788beeff74e21fd0f3af717bc656c96bfc0149531bbc3e81568f9183eb999538e2a2ae5d389ab04ca281a961b2"}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3444.790069][T13259] binder_alloc: binder_alloc_mmap_handler: 13258 20ffc000-20ffd000 already mapped failed -16 14:12:43 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r3, r2) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 64) r5 = dup3(r2, r4, 0x0) (async, rerun: 64) r6 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r6}], 0x0, 0x0, 0x0}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x40046207, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) dup2(r8, r7) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r10 = dup3(r7, r9, 0x0) (async) r11 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r11}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x54, 0x0, &(0x7f0000000040)=[@register_looper, @free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x2}, @acquire_done, @free_buffer={0x40086303, r11}, @request_death={0x400c630e, 0x2}], 0xd8, 0x0, &(0x7f0000000140)="5c3b98a43a2ed8f82421896c60505b7490de30bc40cd40bd7c1f2b0ceb295dfd2a0b43437988334d7a3787375d4c52f6ab9c6c17976be4284669cad052212fc0c5c75f609e1c33bcf1f67377630325ba9a5fa6e8aaa1f2f60dc374e753cdf2780ba61776b276572051a60e3b897b5002f4fd11fbc21034cbd2ff56b9338dc6dc2b5f8e1901965cc7f526da7cd866364fb3cb13bf0bf0ddf94bda290d2fc1d8d4404e12f326fb77b0522ca7788beeff74e21fd0f3af717bc656c96bfc0149531bbc3e81568f9183eb999538e2a2ae5d389ab04ca281a961b2"}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x3, 0x3, 0x12}) 14:12:43 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3400, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfff, 0x0) dup3(r1, r2, 0x0) r3 = dup3(r1, r0, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x64082, 0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x80000200) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f0000000180)={0x5, 0x0, 0x2}) 14:12:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfff, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r0, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x64082, 0x0) r4 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x80000200) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f0000000180)={0x5, 0x0, 0x2}) [ 3445.270307][T13275] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 3445.420471][T13275] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:44 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x10], 0x0, 0x0) 14:12:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x3, 0x3, 0x12}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r3) (async) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4}) (async) dup2(r0, r5) (async) accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) (async) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x3, 0x3, 0x12}) (async) 14:12:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfff, 0x0) dup3(r1, r2, 0x0) (async) r3 = dup3(r1, r0, 0x0) openat$damon_kdamond_pid(0xffffff9c, &(0x7f0000000040), 0x64082, 0x0) (async) r4 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$RTC_IRQP_SET(r4, 0x4004700c, 0x80000200) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f0000000180)={0x5, 0x0, 0x2}) 14:12:44 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x9) 14:12:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:44 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async, rerun: 64) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3446.019308][T13306] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000000040)={0x100, 0xffffffff, 0x86, 0x9, 0x10, 0x80000001}) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) r6 = dup2(r0, r5) r7 = accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x3, 0x3, 0x12}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r3) (async) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4}) (async) dup2(r0, r5) (async) accept4$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x800) (async) ioctl$BTRFS_IOC_SET_FEATURES(r7, 0x40309439, &(0x7f0000000100)={0x3, 0x3, 0x12}) (async) 14:12:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000000040)={0x100, 0xffffffff, 0x86, 0x9, 0x10, 0x80000001}) (async) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:45 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r2, 0xc0186416, &(0x7f0000000040)={0x100, 0xffffffff, 0x86, 0x9, 0x10, 0x80000001}) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000080)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3a00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:45 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 14:12:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x43, 0x0, &(0x7f0000000140)="42d650f9ec4bead3388f5f16c866b99c8c403dc33c58ac9859dacdd20f84510cdbbe657208b5305f7b369713e70b01483b8379ab78d1aa49fc210120d2a6990601a47d"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x43, 0x0, &(0x7f0000000140)="42d650f9ec4bead3388f5f16c866b99c8c403dc33c58ac9859dacdd20f84510cdbbe657208b5305f7b369713e70b01483b8379ab78d1aa49fc210120d2a6990601a47d"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x300) [ 3446.989565][T13341] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:46 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x43, 0x0, &(0x7f0000000140)="42d650f9ec4bead3388f5f16c866b99c8c403dc33c58ac9859dacdd20f84510cdbbe657208b5305f7b369713e70b01483b8379ab78d1aa49fc210120d2a6990601a47d"}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_collapse_huge_page_swapin\x00', r6}, 0x10) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) dup2(r0, r7) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r10, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r13, &(0x7f00000000c0)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipmr_newroute={0x74, 0x18, 0x400, 0x70bd2d, 0x25dfdbff, {0x80, 0x20, 0x14, 0xf9, 0xfd, 0x4, 0x0, 0x1, 0x400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @remote}}, @RTA_UID={0x8, 0x19, r8}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_IIF={0x8, 0x3, r11}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x8, 0x23, r14}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8, 0x1, r4}}}, @RTA_PRIORITY={0x8, 0x6, 0xb0000000}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x400000c5) [ 3447.272398][T13341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:46 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1763000054fcf44fe8748c9cee4b4086c6003d03ccc746b2e9f99e32572c9cd1b8ddca7be42c02881135cc371f6fb5f2aad63c943c5d3d41c288398546bf91a8d3b2f36e7e9b41bca8fadacd3f85e4c6adc75e1dd79a19f1d54a93d1f7e8b9e4f61f339dac0cbdbec851e7acd74ecbb5a99443"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:46 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1763000054fcf44fe8748c9cee4b4086c6003d03ccc746b2e9f99e32572c9cd1b8ddca7be42c02881135cc371f6fb5f2aad63c943c5d3d41c288398546bf91a8d3b2f36e7e9b41bca8fadacd3f85e4c6adc75e1dd79a19f1d54a93d1f7e8b9e4f61f339dac0cbdbec851e7acd74ecbb5a99443"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:46 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x2000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 64) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 64) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_collapse_huge_page_swapin\x00', r6}, 0x10) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) dup2(r0, r7) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r10 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r10, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r13 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r13, &(0x7f00000000c0)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipmr_newroute={0x74, 0x18, 0x400, 0x70bd2d, 0x25dfdbff, {0x80, 0x20, 0x14, 0xf9, 0xfd, 0x4, 0x0, 0x1, 0x400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @remote}}, @RTA_UID={0x8, 0x19, r8}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_IIF={0x8, 0x3, r11}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x8, 0x23, r14}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8, 0x1, r4}}}, @RTA_PRIORITY={0x8, 0x6, 0xb0000000}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x400000c5) 14:12:46 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 64) dup3(r1, r0, 0x0) (async, rerun: 64) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1763000054fcf44fe8748c9cee4b4086c6003d03ccc746b2e9f99e32572c9cd1b8ddca7be42c02881135cc371f6fb5f2aad63c943c5d3d41c288398546bf91a8d3b2f36e7e9b41bca8fadacd3f85e4c6adc75e1dd79a19f1d54a93d1f7e8b9e4f61f339dac0cbdbec851e7acd74ecbb5a99443"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (rerun: 32) [ 3447.696758][T13366] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:46 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0xee01, &(0x7f0000000040)='./file0\x00') 14:12:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='mm_collapse_huge_page_swapin\x00', r6}, 0x10) (async) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x1}) dup2(r0, r7) (async) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r10, &(0x7f00000000c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @link_local}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r13 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) bind$packet(r13, &(0x7f00000000c0)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipmr_newroute={0x74, 0x18, 0x400, 0x70bd2d, 0x25dfdbff, {0x80, 0x20, 0x14, 0xf9, 0xfd, 0x4, 0x0, 0x1, 0x400}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @remote}}, @RTA_UID={0x8, 0x19, r8}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_IIF={0x8, 0x3, r11}, @RTA_DST={0x8, 0x1, @multicast2}, @RTA_UID={0x8, 0x19, 0xffffffffffffffff}, @RTA_MULTIPATH={0xc, 0x9, {0x1000, 0x8, 0x23, r14}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8, 0x1, r4}}}, @RTA_PRIORITY={0x8, 0x6, 0xb0000000}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x400000c5) 14:12:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 14:12:47 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0xee01, &(0x7f0000000040)='./file0\x00') 14:12:47 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000201, 0xee01, &(0x7f0000000040)='./file0\x00') 14:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x6, 0x1, 0x2, 0x1, 0x7, 0xff}, 0x20) 14:12:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3c00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x6, 0x1, 0x2, 0x1, 0x7, 0xff}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r1) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r2) (async) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x6, 0x1, 0x2, 0x1, 0x7, 0xff}, 0x20) (async) 14:12:47 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x75, 0x9, 0x8, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x10, 0x700, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001100)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r6, @ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="ee8e7c563b4c7c72328dfcc5cbd341c1f422f79eeb924af3c6b58bd4944c893d955414941efe03a0c474bd4e726244f622a94b9c0358172e907f534efe3b7e75e51a09801765544a07ccc280ecdc9e23ab49eb816ccc50961c3c315905a8e812bf4f8e1d619c27d062f6d73acec8d5f46e4ae7f449fbd150f897780d280708332ccb56fbbc6c80e954cb36bb6d1a8f1c1f453f1ffadc9fa167fb90eb4e4239b0b3efe14647ae5cca0d116051d9bb67aa6580ac6bc140f104eb923ed08ad918002f3d58f4568cfc69250865ac6e7dc137cddad3335bbe2286fe93ebb278f33ba14d53f4ea8074fdcc79f471c925450a63"], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f0000000c40)=@report={0x1c0, 0x20, 0x100, 0x70bd25, 0x25dfdbfe, {0x32, {@in6=@private2, @in6=@mcast1, 0x4e23, 0xfff, 0x4e23, 0x9, 0x2, 0xa0, 0xf3a65d63b62acefc, 0x6, r6, r7}}, [@tfcpad={0x8, 0x16, 0x1}, @encap={0x0, 0x4, {0x1, 0x4e23, 0x4e22, @in=@remote}}, @migrate={0xd2, 0x11, [{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@remote, 0xff, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in=@remote, @in=@multicast2, @in=@multicast2, @in6=@loopback, 0x3c, 0x0, 0x0, 0x34fc, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x2b, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3506, 0x1e, 0xa}]}, @proto={0x5, 0x19, 0x2b}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @local}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8091}, 0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0x80, 0x0, 0x89, r2, r7}, {0x100000000, 0x4, 0x2, 0x4fe9674f, 0x0, 0x3, 0x4}, {0x80000000, 0xfff, 0x7, 0x1000}, 0x9, 0x6e6bb1, 0x2, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x5, 0x4bc, 0x800}}, 0xe8) r8 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="71eb", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x20}, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="1c0a7a8fc9f9e6e485a889ecc96eb2d1433dec95389f7b1534cf4afded", 0x1d}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="2c0000e8000000010100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000a7db8c8ba38288e3f7830000000123000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x4000840}}, {{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000003c0)="63272df191f902abcf3756c277b8511c95d0f86007862e56f7724876fdb22bba2ef4a980e31f53f5a887d84534b49711d95152f57039f54f936c5b836894ee4d8a0385e382026f81e844de66665f08934ed2817b4724510650ea9e6ff8b8e3039a85ba0f09e055f90e3c5225e9994f6f8bbecf3d248b7bc2bb29f6d38c645fc86983520dbefbf2216c1e", 0x8a}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="0ef112f56966c3c393440b2dcbb32fab123f9e15084ba533cce9f976a009f3c37a914ee578d7f847f134220bee02ee76e171d7096172723ef92ef9501a2164c5752f096d1a9f8204e33aa25caa310ddc509d4f245254ca52c8da1d0a8794ac58d44ba7917ebf6c655308bf660a0e0d8787e38b5a2530ab8f33a596a3155c9a0bbdfcd4dba22da2e673a89c42ea99b5e05e32468e8f528e6f859a88605870b02e1bd08dc5380f07e6db1eac197ab595b30e557609f091fe610f219c6761c150f7645a470f296da073eda8fc14", 0xcc}, {&(0x7f00000005c0)="952cc48537cff239863ca9ceb62015ca7f9a30c6e67202bb67ed1f83e56291bf47414071018999a013bc4cf26122f410fe6e22601ec3a91768a2f763ec1ec01a053fae7cc826b7056bc1c0b835f2d7f0f8e9e6a88b4bf336dab2b19bd28c981991122f61e587b02285f7e3364645a39a512ec80678d00fc9a4608fbcf00cf831211336536a1f46ecb8a9f904137d6f86c2be4735b3e855fede3c2c31e5159e92b6ca93ebe45a9ed0d6e6c62c499ad68ed4e39b60b09589090648a3aa045593e8", 0xc0}, {&(0x7f0000000680)="07268e1903c2eb3bc115d0c72dfc9a088b5c962dbb3ea428103b617391d79bb79f8ad0b5ca77be5bedfef02edf97a6ce6f623206fa49d04817eacd8627d04b6dc5a3a2ef24ecade8032bfcde77c97581be94732118231f8b185975f052ef0a15f3820f68d548cb4ce7ec69b49e7e433362dd204f0ed856134bd401b1ea7c6c93264bf7659096e899eb164d156d9a2d5108121f5ffbd317bf08b0e58f2759c3", 0x9f}, {&(0x7f0000000740)="6d917b6d61d64298cac5778b6afb3e53f87d1a8949bb767a52726e4d80dadb4617e5181549935ca5ea83983b14d6b0e5b804bec4b1f1ea3836885d88b13429a68af2b771517b2560de65b9b31b90081aedc8b86f59ebaa67ecf780c0e1c0ecfeffb9db5dd19b6b8421601a7d15377352ce2098c32e508ec9d537d23b0a21906ee7f152ecea345cb5d10489ee72a7749c5fac58f81aa4cf969b3218784c862ca1a9c0964cd73fcdb2722ddf97807a889530672734f494c421d816592d5f2990130b7d11aa21819b39f6dc51133f02794dc91f9242e83f3990e97e57fd", 0xdc}, {&(0x7f0000000840)="8a7102bf4d5bf20e517f89d8063abf4a7700ec5a95967a100f7e0daa9a5fb388d7", 0x21}, {&(0x7f0000000880)="377ce57629c6b00fc28a8aa51ddf29f8698ce5bca42a8a0cb8cbdbfdc7ed9890d6d53b1c996f6271dc70e1f99ef02f4eba0cad807a660489d7e9919ed79dbd707f846927dd102781466e5ac07599c1cc6a22ec4db2f9f8f7cbe37d758fcb104eb0528f32ef0a8748af88e839bc0ec95e3bed8d8b787c53822db368a29299bad841bc33640b395bf991823fd479c4e6d08e181b19715464bb54815d8bcf3a2f833ebe46ee696c2907fc14ad37c12bb2c6dfef824423455b96bd3688a017ae3429136fb6a995e90513f336ea852740c6bbb6d231bcfcad87b4edcbde8c4a039497509ed63e2a", 0xe5}, {&(0x7f0000000980)="fdcbdb1e53916b4c909573dcdcd8a7592374ff63ec", 0x15}], 0x9}}, {{&(0x7f0000000a80)=@abs={0xd927c8ee7ded5a4f, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)="eb19189f19d87d0cb586b471c4b574d22559c90850ec2db91d17fb70e6ea210f1d4b59dede6f962df10480c63753f7c3cd90d39fb628f1a3be369891873f8d", 0x3f}], 0x1, 0x0, 0x0, 0x400405d}}], 0x3, 0x20000000) r10 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) r12 = dup(r11) bind$unix(r12, &(0x7f0000000080)=@abs, 0x6e) r13 = socket$inet_tcp(0x2, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r8, 0x7, r10, &(0x7f0000000080)={r12, r13, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3448.599890][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:12:47 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x700) 14:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r1) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x29}, 0x6, 0x1, 0x2, 0x1, 0x7, 0xff}, 0x20) [ 3448.693758][T13409] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:47 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x75, 0x9, 0x8, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x10, 0x700, 0x0, 0x2}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001100)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r6, @ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="ee8e7c563b4c7c72328dfcc5cbd341c1f422f79eeb924af3c6b58bd4944c893d955414941efe03a0c474bd4e726244f622a94b9c0358172e907f534efe3b7e75e51a09801765544a07ccc280ecdc9e23ab49eb816ccc50961c3c315905a8e812bf4f8e1d619c27d062f6d73acec8d5f46e4ae7f449fbd150f897780d280708332ccb56fbbc6c80e954cb36bb6d1a8f1c1f453f1ffadc9fa167fb90eb4e4239b0b3efe14647ae5cca0d116051d9bb67aa6580ac6bc140f104eb923ed08ad918002f3d58f4568cfc69250865ac6e7dc137cddad3335bbe2286fe93ebb278f33ba14d53f4ea8074fdcc79f471c925450a63"], 0x38}}, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f0000000c40)=@report={0x1c0, 0x20, 0x100, 0x70bd25, 0x25dfdbfe, {0x32, {@in6=@private2, @in6=@mcast1, 0x4e23, 0xfff, 0x4e23, 0x9, 0x2, 0xa0, 0xf3a65d63b62acefc, 0x6, r6, r7}}, [@tfcpad={0x8, 0x16, 0x1}, @encap={0x0, 0x4, {0x1, 0x4e23, 0x4e22, @in=@remote}}, @migrate={0xd2, 0x11, [{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@remote, 0xff, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in=@remote, @in=@multicast2, @in=@multicast2, @in6=@loopback, 0x3c, 0x0, 0x0, 0x34fc, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x2b, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3506, 0x1e, 0xa}]}, @proto={0x5, 0x19, 0x2b}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @local}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8091}, 0x20) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0x80, 0x0, 0x89, r2, r7}, {0x100000000, 0x4, 0x2, 0x4fe9674f, 0x0, 0x3, 0x4}, {0x80000000, 0xfff, 0x7, 0x1000}, 0x9, 0x6e6bb1, 0x2, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x5, 0x4bc, 0x800}}, 0xe8) (async) r8 = gettid() (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="71eb", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x20}, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="1c0a7a8fc9f9e6e485a889ecc96eb2d1433dec95389f7b1534cf4afded", 0x1d}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="2c0000e8000000010100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000a7db8c8ba38288e3f7830000000123000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x4000840}}, {{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000003c0)="63272df191f902abcf3756c277b8511c95d0f86007862e56f7724876fdb22bba2ef4a980e31f53f5a887d84534b49711d95152f57039f54f936c5b836894ee4d8a0385e382026f81e844de66665f08934ed2817b4724510650ea9e6ff8b8e3039a85ba0f09e055f90e3c5225e9994f6f8bbecf3d248b7bc2bb29f6d38c645fc86983520dbefbf2216c1e", 0x8a}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="0ef112f56966c3c393440b2dcbb32fab123f9e15084ba533cce9f976a009f3c37a914ee578d7f847f134220bee02ee76e171d7096172723ef92ef9501a2164c5752f096d1a9f8204e33aa25caa310ddc509d4f245254ca52c8da1d0a8794ac58d44ba7917ebf6c655308bf660a0e0d8787e38b5a2530ab8f33a596a3155c9a0bbdfcd4dba22da2e673a89c42ea99b5e05e32468e8f528e6f859a88605870b02e1bd08dc5380f07e6db1eac197ab595b30e557609f091fe610f219c6761c150f7645a470f296da073eda8fc14", 0xcc}, {&(0x7f00000005c0)="952cc48537cff239863ca9ceb62015ca7f9a30c6e67202bb67ed1f83e56291bf47414071018999a013bc4cf26122f410fe6e22601ec3a91768a2f763ec1ec01a053fae7cc826b7056bc1c0b835f2d7f0f8e9e6a88b4bf336dab2b19bd28c981991122f61e587b02285f7e3364645a39a512ec80678d00fc9a4608fbcf00cf831211336536a1f46ecb8a9f904137d6f86c2be4735b3e855fede3c2c31e5159e92b6ca93ebe45a9ed0d6e6c62c499ad68ed4e39b60b09589090648a3aa045593e8", 0xc0}, {&(0x7f0000000680)="07268e1903c2eb3bc115d0c72dfc9a088b5c962dbb3ea428103b617391d79bb79f8ad0b5ca77be5bedfef02edf97a6ce6f623206fa49d04817eacd8627d04b6dc5a3a2ef24ecade8032bfcde77c97581be94732118231f8b185975f052ef0a15f3820f68d548cb4ce7ec69b49e7e433362dd204f0ed856134bd401b1ea7c6c93264bf7659096e899eb164d156d9a2d5108121f5ffbd317bf08b0e58f2759c3", 0x9f}, {&(0x7f0000000740)="6d917b6d61d64298cac5778b6afb3e53f87d1a8949bb767a52726e4d80dadb4617e5181549935ca5ea83983b14d6b0e5b804bec4b1f1ea3836885d88b13429a68af2b771517b2560de65b9b31b90081aedc8b86f59ebaa67ecf780c0e1c0ecfeffb9db5dd19b6b8421601a7d15377352ce2098c32e508ec9d537d23b0a21906ee7f152ecea345cb5d10489ee72a7749c5fac58f81aa4cf969b3218784c862ca1a9c0964cd73fcdb2722ddf97807a889530672734f494c421d816592d5f2990130b7d11aa21819b39f6dc51133f02794dc91f9242e83f3990e97e57fd", 0xdc}, {&(0x7f0000000840)="8a7102bf4d5bf20e517f89d8063abf4a7700ec5a95967a100f7e0daa9a5fb388d7", 0x21}, {&(0x7f0000000880)="377ce57629c6b00fc28a8aa51ddf29f8698ce5bca42a8a0cb8cbdbfdc7ed9890d6d53b1c996f6271dc70e1f99ef02f4eba0cad807a660489d7e9919ed79dbd707f846927dd102781466e5ac07599c1cc6a22ec4db2f9f8f7cbe37d758fcb104eb0528f32ef0a8748af88e839bc0ec95e3bed8d8b787c53822db368a29299bad841bc33640b395bf991823fd479c4e6d08e181b19715464bb54815d8bcf3a2f833ebe46ee696c2907fc14ad37c12bb2c6dfef824423455b96bd3688a017ae3429136fb6a995e90513f336ea852740c6bbb6d231bcfcad87b4edcbde8c4a039497509ed63e2a", 0xe5}, {&(0x7f0000000980)="fdcbdb1e53916b4c909573dcdcd8a7592374ff63ec", 0x15}], 0x9}}, {{&(0x7f0000000a80)=@abs={0xd927c8ee7ded5a4f, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)="eb19189f19d87d0cb586b471c4b574d22559c90850ec2db91d17fb70e6ea210f1d4b59dede6f962df10480c63753f7c3cd90d39fb628f1a3be369891873f8d", 0x3f}], 0x1, 0x0, 0x0, 0x400405d}}], 0x3, 0x20000000) (async) r10 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) r11 = socket$inet_smc(0x2b, 0x1, 0x0) r12 = dup(r11) bind$unix(r12, &(0x7f0000000080)=@abs, 0x6e) r13 = socket$inet_tcp(0x2, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r8, 0x7, r10, &(0x7f0000000080)={r12, r13, 0x8}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0xd001, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x3f) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8060}, 0x20000004) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8000, 0xff, 0xc80, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @local}}}}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5bb5f84bbdcace4e}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x3c, 0x16, 0x100, 0x70bd27, 0x7, {0xa, 0x0, 0x144, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1d4}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8008010}, 0x20000001) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000100)) [ 3449.093834][T13409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0xd001, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x3f) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8060}, 0x20000004) (rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8000, 0xff, 0xc80, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @local}}}}) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5bb5f84bbdcace4e}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x3c, 0x16, 0x100, 0x70bd27, 0x7, {0xa, 0x0, 0x144, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1d4}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8008010}, 0x20000001) (async, rerun: 32) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000140)) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000100)) 14:12:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x3) [ 3449.380917][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:12:48 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x75, 0x9, 0x8, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x10, 0x700, 0x0, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x75, 0x9, 0x8, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x10, 0x700, 0x0, 0x2}}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001100)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r6, @ANYRES8=r2, @ANYRES32=r5, @ANYBLOB="ee8e7c563b4c7c72328dfcc5cbd341c1f422f79eeb924af3c6b58bd4944c893d955414941efe03a0c474bd4e726244f622a94b9c0358172e907f534efe3b7e75e51a09801765544a07ccc280ecdc9e23ab49eb816ccc50961c3c315905a8e812bf4f8e1d619c27d062f6d73acec8d5f46e4ae7f449fbd150f897780d280708332ccb56fbbc6c80e954cb36bb6d1a8f1c1f453f1ffadc9fa167fb90eb4e4239b0b3efe14647ae5cca0d116051d9bb67aa6580ac6bc140f104eb923ed08ad918002f3d58f4568cfc69250865ac6e7dc137cddad3335bbe2286fe93ebb278f33ba14d53f4ea8074fdcc79f471c925450a63"], 0x38}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f0000000c40)=@report={0x1c0, 0x20, 0x100, 0x70bd25, 0x25dfdbfe, {0x32, {@in6=@private2, @in6=@mcast1, 0x4e23, 0xfff, 0x4e23, 0x9, 0x2, 0xa0, 0xf3a65d63b62acefc, 0x6, r6, r7}}, [@tfcpad={0x8, 0x16, 0x1}, @encap={0x0, 0x4, {0x1, 0x4e23, 0x4e22, @in=@remote}}, @migrate={0xd2, 0x11, [{@in=@rand_addr=0x64010102, @in6=@rand_addr=' \x01\x00', @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in=@remote, 0xff, 0x4, 0x0, 0x2, 0xa, 0xa}, {@in=@remote, @in=@multicast2, @in=@multicast2, @in6=@loopback, 0x3c, 0x0, 0x0, 0x34fc, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x2b, 0x0, 0x0, 0x3500, 0x2, 0x2}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x3506, 0x1e, 0xa}]}, @proto={0x5, 0x19, 0x2b}, @coaddr={0x14, 0xe, @in6=@ipv4={'\x00', '\xff\xff', @local}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x8091}, 0x20) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@mcast2, @in=@remote, 0x4e23, 0x4, 0x4e23, 0x5, 0xa, 0x80, 0x0, 0x89, r2, r7}, {0x100000000, 0x4, 0x2, 0x4fe9674f, 0x0, 0x3, 0x4}, {0x80000000, 0xfff, 0x7, 0x1000}, 0x9, 0x6e6bb1, 0x2, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, 0x4d3}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x3, 0x5, 0x4bc, 0x800}}, 0xe8) gettid() (async) r8 = gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000004a40)) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="71eb", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x20}, 0x1) (async) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="71eb", 0x2}], 0x1, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee01}}}], 0x20}, 0x1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="1c0a7a8fc9f9e6e485a889ecc96eb2d1433dec95389f7b1534cf4afded", 0x1d}], 0x1, &(0x7f0000000e80)=ANY=[@ANYBLOB="2c0000e8000000010100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c0000a7db8c8ba38288e3f7830000000123000002000000", @ANYRES32=0x0, @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x4000840}}, {{&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000003c0)="63272df191f902abcf3756c277b8511c95d0f86007862e56f7724876fdb22bba2ef4a980e31f53f5a887d84534b49711d95152f57039f54f936c5b836894ee4d8a0385e382026f81e844de66665f08934ed2817b4724510650ea9e6ff8b8e3039a85ba0f09e055f90e3c5225e9994f6f8bbecf3d248b7bc2bb29f6d38c645fc86983520dbefbf2216c1e", 0x8a}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="0ef112f56966c3c393440b2dcbb32fab123f9e15084ba533cce9f976a009f3c37a914ee578d7f847f134220bee02ee76e171d7096172723ef92ef9501a2164c5752f096d1a9f8204e33aa25caa310ddc509d4f245254ca52c8da1d0a8794ac58d44ba7917ebf6c655308bf660a0e0d8787e38b5a2530ab8f33a596a3155c9a0bbdfcd4dba22da2e673a89c42ea99b5e05e32468e8f528e6f859a88605870b02e1bd08dc5380f07e6db1eac197ab595b30e557609f091fe610f219c6761c150f7645a470f296da073eda8fc14", 0xcc}, {&(0x7f00000005c0)="952cc48537cff239863ca9ceb62015ca7f9a30c6e67202bb67ed1f83e56291bf47414071018999a013bc4cf26122f410fe6e22601ec3a91768a2f763ec1ec01a053fae7cc826b7056bc1c0b835f2d7f0f8e9e6a88b4bf336dab2b19bd28c981991122f61e587b02285f7e3364645a39a512ec80678d00fc9a4608fbcf00cf831211336536a1f46ecb8a9f904137d6f86c2be4735b3e855fede3c2c31e5159e92b6ca93ebe45a9ed0d6e6c62c499ad68ed4e39b60b09589090648a3aa045593e8", 0xc0}, {&(0x7f0000000680)="07268e1903c2eb3bc115d0c72dfc9a088b5c962dbb3ea428103b617391d79bb79f8ad0b5ca77be5bedfef02edf97a6ce6f623206fa49d04817eacd8627d04b6dc5a3a2ef24ecade8032bfcde77c97581be94732118231f8b185975f052ef0a15f3820f68d548cb4ce7ec69b49e7e433362dd204f0ed856134bd401b1ea7c6c93264bf7659096e899eb164d156d9a2d5108121f5ffbd317bf08b0e58f2759c3", 0x9f}, {&(0x7f0000000740)="6d917b6d61d64298cac5778b6afb3e53f87d1a8949bb767a52726e4d80dadb4617e5181549935ca5ea83983b14d6b0e5b804bec4b1f1ea3836885d88b13429a68af2b771517b2560de65b9b31b90081aedc8b86f59ebaa67ecf780c0e1c0ecfeffb9db5dd19b6b8421601a7d15377352ce2098c32e508ec9d537d23b0a21906ee7f152ecea345cb5d10489ee72a7749c5fac58f81aa4cf969b3218784c862ca1a9c0964cd73fcdb2722ddf97807a889530672734f494c421d816592d5f2990130b7d11aa21819b39f6dc51133f02794dc91f9242e83f3990e97e57fd", 0xdc}, {&(0x7f0000000840)="8a7102bf4d5bf20e517f89d8063abf4a7700ec5a95967a100f7e0daa9a5fb388d7", 0x21}, {&(0x7f0000000880)="377ce57629c6b00fc28a8aa51ddf29f8698ce5bca42a8a0cb8cbdbfdc7ed9890d6d53b1c996f6271dc70e1f99ef02f4eba0cad807a660489d7e9919ed79dbd707f846927dd102781466e5ac07599c1cc6a22ec4db2f9f8f7cbe37d758fcb104eb0528f32ef0a8748af88e839bc0ec95e3bed8d8b787c53822db368a29299bad841bc33640b395bf991823fd479c4e6d08e181b19715464bb54815d8bcf3a2f833ebe46ee696c2907fc14ad37c12bb2c6dfef824423455b96bd3688a017ae3429136fb6a995e90513f336ea852740c6bbb6d231bcfcad87b4edcbde8c4a039497509ed63e2a", 0xe5}, {&(0x7f0000000980)="fdcbdb1e53916b4c909573dcdcd8a7592374ff63ec", 0x15}], 0x9}}, {{&(0x7f0000000a80)=@abs={0xd927c8ee7ded5a4f, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000b00)="eb19189f19d87d0cb586b471c4b574d22559c90850ec2db91d17fb70e6ea210f1d4b59dede6f962df10480c63753f7c3cd90d39fb628f1a3be369891873f8d", 0x3f}], 0x1, 0x0, 0x0, 0x400405d}}], 0x3, 0x20000000) r10 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000040), 0x400000, 0x0) r11 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r11) (async) r12 = dup(r11) bind$unix(r12, &(0x7f0000000080)=@abs, 0x6e) r13 = socket$inet_tcp(0x2, 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r8, 0x7, r10, &(0x7f0000000080)={r12, r13, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x3000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = dup2(r0, r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000300)={0x0, 0x3, 0xd001, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000000)=0x3f) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getmulticast={0x14, 0x3a, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8060}, 0x20000004) (async, rerun: 64) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = dup(r4) bind$unix(r5, &(0x7f0000000080)=@abs, 0x6e) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r6) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8000, 0xff, 0xc80, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010102, @local}}}}) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5bb5f84bbdcace4e}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getaddr={0x3c, 0x16, 0x100, 0x70bd27, 0x7, {0xa, 0x0, 0x144, 0x0, r7}, [@IFA_FLAGS={0x8, 0x8, 0x1d4}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8008010}, 0x20000001) (async, rerun: 32) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f0000000140)) (async, rerun: 32) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000100)) [ 3449.603943][T13430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:12:48 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:48 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x900) 14:12:48 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) [ 3449.863178][T13445] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:48 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:49 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:49 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3f00, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:49 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) [ 3450.413410][T13469] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:49 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:49 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xc0, 0x0, &(0x7f0000000140)="711ec4688f0819f5dccc22e8ab91f7a787317d53af120db75b3ad9bef87bc00aa3bc186b7da6967bd131889b10afcf3665145ba50bc31a37335d38edc5a08626659b0da16d883709384238c72cbba8bf4268086961cd2ef0e65e7e9d302058191d43e0a07279b9cd1c2221c7ddb832b63fcd71e031cbc17651ceffcfe794aeae11c2b5fcb65475482011041a23af41437afc68682a42ec574ef45373b54bc34d48fc8128caa7e4060928d6a5e2b61f54056acda0afa5a41b409641fd3675f39e"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3450.621296][T13469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r2) (async) 14:12:49 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xc0, 0x0, &(0x7f0000000140)="711ec4688f0819f5dccc22e8ab91f7a787317d53af120db75b3ad9bef87bc00aa3bc186b7da6967bd131889b10afcf3665145ba50bc31a37335d38edc5a08626659b0da16d883709384238c72cbba8bf4268086961cd2ef0e65e7e9d302058191d43e0a07279b9cd1c2221c7ddb832b63fcd71e031cbc17651ceffcfe794aeae11c2b5fcb65475482011041a23af41437afc68682a42ec574ef45373b54bc34d48fc8128caa7e4060928d6a5e2b61f54056acda0afa5a41b409641fd3675f39e"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xc0, 0x0, &(0x7f0000000140)="711ec4688f0819f5dccc22e8ab91f7a787317d53af120db75b3ad9bef87bc00aa3bc186b7da6967bd131889b10afcf3665145ba50bc31a37335d38edc5a08626659b0da16d883709384238c72cbba8bf4268086961cd2ef0e65e7e9d302058191d43e0a07279b9cd1c2221c7ddb832b63fcd71e031cbc17651ceffcfe794aeae11c2b5fcb65475482011041a23af41437afc68682a42ec574ef45373b54bc34d48fc8128caa7e4060928d6a5e2b61f54056acda0afa5a41b409641fd3675f39e"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x4) 14:12:49 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xc0, 0x0, &(0x7f0000000140)="711ec4688f0819f5dccc22e8ab91f7a787317d53af120db75b3ad9bef87bc00aa3bc186b7da6967bd131889b10afcf3665145ba50bc31a37335d38edc5a08626659b0da16d883709384238c72cbba8bf4268086961cd2ef0e65e7e9d302058191d43e0a07279b9cd1c2221c7ddb832b63fcd71e031cbc17651ceffcfe794aeae11c2b5fcb65475482011041a23af41437afc68682a42ec574ef45373b54bc34d48fc8128caa7e4060928d6a5e2b61f54056acda0afa5a41b409641fd3675f39e"}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="0500"], 0x2, 0x0) [ 3451.066940][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 3451.074204][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 14:12:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x48}, {r0}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:50 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x48}, {r0}], 0x2, 0x0) (async) poll(&(0x7f0000000040)=[{r1, 0x48}, {r0}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="0500"], 0x2, 0x0) 14:12:50 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x3f00) 14:12:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x48}, {r0}], 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000040)=[{r1, 0x48}, {r0}], 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) fsetxattr$security_ima(r2, &(0x7f0000000000), &(0x7f00000000c0)=ANY=[@ANYBLOB="0500"], 0x2, 0x0) 14:12:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3f04, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x183a80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={0x0, 0x2, 0x1, [0x6, 0x7, 0xfff, 0x1, 0x80], [0x71, 0x200000000000000, 0x6c37, 0x1, 0x800, 0x3, 0x3, 0x7, 0x3, 0x3ff, 0x0, 0x8, 0x9, 0x1, 0x2, 0x9, 0x6, 0x5, 0xaa8, 0x2, 0x8000000000, 0x5, 0x0, 0x6, 0x7, 0x9, 0x5, 0x5, 0x5, 0x100, 0x8321, 0x7, 0x6, 0x1, 0xfff, 0x400, 0xfffffffffffffffd, 0x49, 0x6, 0x7, 0x1, 0x2, 0x1b, 0xecc, 0x100, 0x4, 0x8, 0x7ef, 0x4, 0x4, 0x7, 0x4, 0x2, 0x100, 0x9, 0xdc42, 0x7, 0x6, 0x7f, 0x6, 0x9, 0x8000000000000001, 0x1, 0x1, 0x5, 0x2, 0x1, 0x800, 0x40, 0x401, 0xfa3, 0x4, 0x6, 0x5, 0x8001, 0x1, 0x1, 0x8000000000000000, 0x2, 0xd2b8, 0x3ff, 0x4, 0x9, 0x7fffffff, 0x0, 0x5, 0x3, 0x101, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, 0xf7, 0x7, 0x80000000, 0x8000000000000000, 0x200, 0x1, 0x3ff, 0x200, 0x1, 0x6, 0x3, 0x2, 0x3, 0x1, 0x5, 0x8, 0xffffffffffffffe1, 0x8000, 0x0, 0x5, 0x80000001, 0x6, 0xffffffffffff8000, 0x8, 0x20, 0x2, 0x9, 0x2, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000b80)={r7, 0x101, 0x6}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000340)={"8406ebb2eb7e51c6cafe843e040834fe6936f41b7afd93e8d0611cb47de54584", r2}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = dup(r10) bind$unix(r11, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000380)) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4000}, {r2, 0x2}, {r0}, {r0, 0x2000}, {r0}, {r3, 0x4190}, {r0, 0x2020}, {0xffffffffffffffff, 0x400}, {r0, 0x40}, {r9, 0x8084}], 0xa, &(0x7f0000000240)={r12, r13+10000000}, &(0x7f0000000280)={[0x2, 0xfff]}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r14, r0, 0x0) poll(&(0x7f0000000100)=[{r14}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="c1fb0ea8"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) recvmmsg$unix(r3, &(0x7f0000005700)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000f80)=""/221, 0xdd}, {&(0x7f0000001080)=""/148, 0x94}, {&(0x7f0000001140)=""/92, 0x5c}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f00000011c0)=""/185, 0xb9}], 0x7, &(0x7f0000001280)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000000010000000000", @ANYRES32, @ANYRES32], 0xb0}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000013c0)=""/254, 0xfe}, {&(0x7f00000014c0)=""/199, 0xc7}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f00000016c0)=""/16, 0x10}], 0x6, &(0x7f0000005640)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2000010007000000e1ffffff8de4107953ab65f91dddb2765ff4db4be5df7a74cb0f4a67f30ca71c86a6769313f6d0304fddb7e16d5122c28a9da8a4acecfc4e32f6a25d14263e96ec75822f2c68eaa94a2c19fceec3694df04881", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x38}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)=""/236, 0xec}], 0x1, &(0x7f0000001940)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/134, 0x86}, {&(0x7f0000002b80)=""/208, 0xd0}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x4, &(0x7f0000003cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x74}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003dc0)=""/240, 0xf0}, {&(0x7f0000003ec0)=""/103, 0x67}, {&(0x7f0000003f40)=""/73, 0x49}, {&(0x7f0000003fc0)=""/255, 0xff}, {&(0x7f00000040c0)=""/160, 0xa0}], 0x5, &(0x7f00000041c0)=[@cred={{0x18}}], 0x18}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f0000004280)=""/63, 0x3f}, {&(0x7f00000042c0)=""/35, 0x23}, {&(0x7f0000004300)=""/142, 0x8e}, {&(0x7f00000043c0)=""/240, 0xf0}, {&(0x7f00000044c0)=""/86, 0x56}, {&(0x7f0000004540)=""/21, 0x15}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/91, 0x5b}], 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="280000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002766c38cae12792000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x88}}], 0x6, 0x120, 0x0) [ 3451.797111][T13520] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 3451.905650][T13525] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r8) 14:12:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x183a80, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={0x0, 0x2, 0x1, [0x6, 0x7, 0xfff, 0x1, 0x80], [0x71, 0x200000000000000, 0x6c37, 0x1, 0x800, 0x3, 0x3, 0x7, 0x3, 0x3ff, 0x0, 0x8, 0x9, 0x1, 0x2, 0x9, 0x6, 0x5, 0xaa8, 0x2, 0x8000000000, 0x5, 0x0, 0x6, 0x7, 0x9, 0x5, 0x5, 0x5, 0x100, 0x8321, 0x7, 0x6, 0x1, 0xfff, 0x400, 0xfffffffffffffffd, 0x49, 0x6, 0x7, 0x1, 0x2, 0x1b, 0xecc, 0x100, 0x4, 0x8, 0x7ef, 0x4, 0x4, 0x7, 0x4, 0x2, 0x100, 0x9, 0xdc42, 0x7, 0x6, 0x7f, 0x6, 0x9, 0x8000000000000001, 0x1, 0x1, 0x5, 0x2, 0x1, 0x800, 0x40, 0x401, 0xfa3, 0x4, 0x6, 0x5, 0x8001, 0x1, 0x1, 0x8000000000000000, 0x2, 0xd2b8, 0x3ff, 0x4, 0x9, 0x7fffffff, 0x0, 0x5, 0x3, 0x101, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, 0xf7, 0x7, 0x80000000, 0x8000000000000000, 0x200, 0x1, 0x3ff, 0x200, 0x1, 0x6, 0x3, 0x2, 0x3, 0x1, 0x5, 0x8, 0xffffffffffffffe1, 0x8000, 0x0, 0x5, 0x80000001, 0x6, 0xffffffffffff8000, 0x8, 0x20, 0x2, 0x9, 0x2, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000b80)={r7, 0x101, 0x6}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000340)={"8406ebb2eb7e51c6cafe843e040834fe6936f41b7afd93e8d0611cb47de54584", r2}) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) (async, rerun: 64) r10 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 64) r11 = dup(r10) bind$unix(r11, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000380)) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4000}, {r2, 0x2}, {r0}, {r0, 0x2000}, {r0}, {r3, 0x4190}, {r0, 0x2020}, {0xffffffffffffffff, 0x400}, {r0, 0x40}, {r9, 0x8084}], 0xa, &(0x7f0000000240)={r12, r13+10000000}, &(0x7f0000000280)={[0x2, 0xfff]}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async, rerun: 32) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r14, r0, 0x0) poll(&(0x7f0000000100)=[{r14}], 0x1, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="c1fb0ea8"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) recvmmsg$unix(r3, &(0x7f0000005700)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000f80)=""/221, 0xdd}, {&(0x7f0000001080)=""/148, 0x94}, {&(0x7f0000001140)=""/92, 0x5c}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f00000011c0)=""/185, 0xb9}], 0x7, &(0x7f0000001280)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000000010000000000", @ANYRES32, @ANYRES32], 0xb0}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000013c0)=""/254, 0xfe}, {&(0x7f00000014c0)=""/199, 0xc7}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f00000016c0)=""/16, 0x10}], 0x6, &(0x7f0000005640)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2000010007000000e1ffffff8de4107953ab65f91dddb2765ff4db4be5df7a74cb0f4a67f30ca71c86a6769313f6d0304fddb7e16d5122c28a9da8a4acecfc4e32f6a25d14263e96ec75822f2c68eaa94a2c19fceec3694df04881", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x38}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)=""/236, 0xec}], 0x1, &(0x7f0000001940)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/134, 0x86}, {&(0x7f0000002b80)=""/208, 0xd0}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x4, &(0x7f0000003cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x74}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003dc0)=""/240, 0xf0}, {&(0x7f0000003ec0)=""/103, 0x67}, {&(0x7f0000003f40)=""/73, 0x49}, {&(0x7f0000003fc0)=""/255, 0xff}, {&(0x7f00000040c0)=""/160, 0xa0}], 0x5, &(0x7f00000041c0)=[@cred={{0x18}}], 0x18}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f0000004280)=""/63, 0x3f}, {&(0x7f00000042c0)=""/35, 0x23}, {&(0x7f0000004300)=""/142, 0x8e}, {&(0x7f00000043c0)=""/240, 0xf0}, {&(0x7f00000044c0)=""/86, 0x56}, {&(0x7f0000004540)=""/21, 0x15}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/91, 0x5b}], 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="280000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002766c38cae12792000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x88}}], 0x6, 0x120, 0x0) 14:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r8) [ 3452.150863][T13525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r5) (async) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r8) 14:12:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x7) 14:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:51 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async, rerun: 32) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x183a80, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000300)={&(0x7f00000002c0), 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000740)={0x0, 0x2, 0x1, [0x6, 0x7, 0xfff, 0x1, 0x80], [0x71, 0x200000000000000, 0x6c37, 0x1, 0x800, 0x3, 0x3, 0x7, 0x3, 0x3ff, 0x0, 0x8, 0x9, 0x1, 0x2, 0x9, 0x6, 0x5, 0xaa8, 0x2, 0x8000000000, 0x5, 0x0, 0x6, 0x7, 0x9, 0x5, 0x5, 0x5, 0x100, 0x8321, 0x7, 0x6, 0x1, 0xfff, 0x400, 0xfffffffffffffffd, 0x49, 0x6, 0x7, 0x1, 0x2, 0x1b, 0xecc, 0x100, 0x4, 0x8, 0x7ef, 0x4, 0x4, 0x7, 0x4, 0x2, 0x100, 0x9, 0xdc42, 0x7, 0x6, 0x7f, 0x6, 0x9, 0x8000000000000001, 0x1, 0x1, 0x5, 0x2, 0x1, 0x800, 0x40, 0x401, 0xfa3, 0x4, 0x6, 0x5, 0x8001, 0x1, 0x1, 0x8000000000000000, 0x2, 0xd2b8, 0x3ff, 0x4, 0x9, 0x7fffffff, 0x0, 0x5, 0x3, 0x101, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, 0xf7, 0x7, 0x80000000, 0x8000000000000000, 0x200, 0x1, 0x3ff, 0x200, 0x1, 0x6, 0x3, 0x2, 0x3, 0x1, 0x5, 0x8, 0xffffffffffffffe1, 0x8000, 0x0, 0x5, 0x80000001, 0x6, 0xffffffffffff8000, 0x8, 0x20, 0x2, 0x9, 0x2, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000000b80)={r7, 0x101, 0x6}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000340)={"8406ebb2eb7e51c6cafe843e040834fe6936f41b7afd93e8d0611cb47de54584", r2}) (async) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = dup(r10) bind$unix(r11, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000380)) (async) bind$unix(r9, &(0x7f0000000080)=@abs, 0x6e) (async) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x4000}, {r2, 0x2}, {r0}, {r0, 0x2000}, {r0}, {r3, 0x4190}, {r0, 0x2020}, {0xffffffffffffffff, 0x400}, {r0, 0x40}, {r9, 0x8084}], 0xa, &(0x7f0000000240)={r12, r13+10000000}, &(0x7f0000000280)={[0x2, 0xfff]}, 0x8) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r14, r0, 0x0) poll(&(0x7f0000000100)=[{r14}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="c1fb0ea8"], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) recvmmsg$unix(r3, &(0x7f0000005700)=[{{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000000680)=""/111, 0x6f}, {&(0x7f0000000f80)=""/221, 0xdd}, {&(0x7f0000001080)=""/148, 0x94}, {&(0x7f0000001140)=""/92, 0x5c}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f00000011c0)=""/185, 0xb9}], 0x7, &(0x7f0000001280)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="100000000100000001000000", @ANYRES32, @ANYBLOB="2c0000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="140000000000010000000000", @ANYRES32, @ANYRES32], 0xb0}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f00000013c0)=""/254, 0xfe}, {&(0x7f00000014c0)=""/199, 0xc7}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000004c0)=""/42, 0x2a}, {&(0x7f00000016c0)=""/16, 0x10}], 0x6, &(0x7f0000005640)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2000010007000000e1ffffff8de4107953ab65f91dddb2765ff4db4be5df7a74cb0f4a67f30ca71c86a6769313f6d0304fddb7e16d5122c28a9da8a4acecfc4e32f6a25d14263e96ec75822f2c68eaa94a2c19fceec3694df04881", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x38}}, {{&(0x7f0000001780)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000001800)=""/236, 0xec}], 0x1, &(0x7f0000001940)=[@cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/134, 0x86}, {&(0x7f0000002b80)=""/208, 0xd0}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x4, &(0x7f0000003cc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x74}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000004180)=[{&(0x7f0000003dc0)=""/240, 0xf0}, {&(0x7f0000003ec0)=""/103, 0x67}, {&(0x7f0000003f40)=""/73, 0x49}, {&(0x7f0000003fc0)=""/255, 0xff}, {&(0x7f00000040c0)=""/160, 0xa0}], 0x5, &(0x7f00000041c0)=[@cred={{0x18}}], 0x18}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000005600)=[{&(0x7f0000004280)=""/63, 0x3f}, {&(0x7f00000042c0)=""/35, 0x23}, {&(0x7f0000004300)=""/142, 0x8e}, {&(0x7f00000043c0)=""/240, 0xf0}, {&(0x7f00000044c0)=""/86, 0x56}, {&(0x7f0000004540)=""/21, 0x15}, {&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/91, 0x5b}], 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="280000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002766c38cae12792000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x88}}], 0x6, 0x120, 0x0) 14:12:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:51 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00a247"], 0x0, 0x1000000000000, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x10100) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x28, @time={0x7ff, 0x4}, 0xff, {0x2, 0x8}, 0x2, 0x2, 0x80}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000300)=0x100, 0x4) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}], 0xc, 0x0, &(0x7f0000000280)="369b9304af0e4eb54c4bd430"}) 14:12:51 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x20000) 14:12:51 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00a247"], 0x0, 0x1000000000000, 0x0}) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x10100) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x28, @time={0x7ff, 0x4}, 0xff, {0x2, 0x8}, 0x2, 0x2, 0x80}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000300)=0x100, 0x4) (async) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}], 0xc, 0x0, &(0x7f0000000280)="369b9304af0e4eb54c4bd430"}) 14:12:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e00a247"], 0x0, 0x1000000000000, 0x0}) syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x10100) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x10100) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x28, @time={0x7ff, 0x4}, 0xff, {0x2, 0x8}, 0x2, 0x2, 0x80}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) (async) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r5) (async) r6 = dup(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x0, &(0x7f0000000300)=0x100, 0x4) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}], 0xc, 0x0, &(0x7f0000000280)="369b9304af0e4eb54c4bd430"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@binder={0x73622a85, 0x100}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x400}], 0xc, 0x0, &(0x7f0000000280)="369b9304af0e4eb54c4bd430"}) 14:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) 14:12:52 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x5000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x3fff, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0xa8, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/171, 0xab, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/175, 0xaf, 0x0, 0x17}, @fda={0x66646185, 0x3, 0x0, 0x8}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0xe6, 0x0, &(0x7f0000000600)="5ad0ab6d542d684de63fccf24b48a28be6139e50fe02b20b8b4ccc486c9ac778c6be8111053836023cd3119f924442301f15f282e75d97052c5dbf6ed569d314396b647a19e86448bf439760ea095fd80d59d81f5ad4f9505ab99a7e036009ed785322f7e2480dba70431747e74cecc7320a36c8b6c6aaf05c0e84b726fa8574665c0459bde62446247748bf90b7f09a59930d966c9d09f118a0442980db3d55cbb6989d379ed4b49a527ad059d8e21f196dc8ad44d7d75ff46d92ebb35c8696821aeb167b8d25f4c94a4c4dde2e10d9e9d46d4dc6910f28c6c525859ac9182cec3d7f228803"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000940)={0x20000000, &(0x7f0000000740)=0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0), {0x6}, &(0x7f0000000800)=""/9, 0x9, &(0x7f0000000840)=""/174, &(0x7f0000000900)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r3}}, 0x58) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r4, 0x5f53000) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x672000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 14:12:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0xa8, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/171, 0xab, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/175, 0xaf, 0x0, 0x17}, @fda={0x66646185, 0x3, 0x0, 0x8}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0xe6, 0x0, &(0x7f0000000600)="5ad0ab6d542d684de63fccf24b48a28be6139e50fe02b20b8b4ccc486c9ac778c6be8111053836023cd3119f924442301f15f282e75d97052c5dbf6ed569d314396b647a19e86448bf439760ea095fd80d59d81f5ad4f9505ab99a7e036009ed785322f7e2480dba70431747e74cecc7320a36c8b6c6aaf05c0e84b726fa8574665c0459bde62446247748bf90b7f09a59930d966c9d09f118a0442980db3d55cbb6989d379ed4b49a527ad059d8e21f196dc8ad44d7d75ff46d92ebb35c8696821aeb167b8d25f4c94a4c4dde2e10d9e9d46d4dc6910f28c6c525859ac9182cec3d7f228803"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000940)={0x20000000, &(0x7f0000000740)=0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0), {0x6}, &(0x7f0000000800)=""/9, 0x9, &(0x7f0000000840)=""/174, &(0x7f0000000900)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r3}}, 0x58) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r4, 0x5f53000) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3453.492515][T13582] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x672000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) [ 3453.538011][T13585] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x9) 14:12:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000700)={0xa8, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/171, 0xab, 0x1, 0x33}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/175, 0xaf, 0x0, 0x17}, @fda={0x66646185, 0x3, 0x0, 0x8}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}, 0x1000}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0xe6, 0x0, &(0x7f0000000600)="5ad0ab6d542d684de63fccf24b48a28be6139e50fe02b20b8b4ccc486c9ac778c6be8111053836023cd3119f924442301f15f282e75d97052c5dbf6ed569d314396b647a19e86448bf439760ea095fd80d59d81f5ad4f9505ab99a7e036009ed785322f7e2480dba70431747e74cecc7320a36c8b6c6aaf05c0e84b726fa8574665c0459bde62446247748bf90b7f09a59930d966c9d09f118a0442980db3d55cbb6989d379ed4b49a527ad059d8e21f196dc8ad44d7d75ff46d92ebb35c8696821aeb167b8d25f4c94a4c4dde2e10d9e9d46d4dc6910f28c6c525859ac9182cec3d7f228803"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) syz_clone3(&(0x7f0000000940)={0x20000000, &(0x7f0000000740)=0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0), {0x6}, &(0x7f0000000800)=""/9, 0x9, &(0x7f0000000840)=""/174, &(0x7f0000000900)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, {r3}}, 0x58) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r4, 0x5f53000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r4, 0x5f53000) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x672000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r2) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 14:12:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04630440", @ANYRESHEX=r1], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3453.943750][T13585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:52 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04630440", @ANYRESHEX=r1], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x8001) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04630440", @ANYRESHEX=r1], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:53 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x1000000) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c484432b0450cbf19d885bc820eb7186fb450fad1da85bafed49a9b30dc766581b7aea5b85a736cbb54bfc82a77fb2126c3f75d58e1c5a1eb2ec08cf8e291cce33d07"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) 14:12:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x8001) (async) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x8001) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c484432b0450cbf19d885bc820eb7186fb450fad1da85bafed49a9b30dc766581b7aea5b85a736cbb54bfc82a77fb2126c3f75d58e1c5a1eb2ec08cf8e291cce33d07"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c484432b0450cbf19d885bc820eb7186fb450fad1da85bafed49a9b30dc766581b7aea5b85a736cbb54bfc82a77fb2126c3f75d58e1c5a1eb2ec08cf8e291cce33d07"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) (async) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c484432b0450cbf19d885bc820eb7186fb450fad1da85bafed49a9b30dc766581b7aea5b85a736cbb54bfc82a77fb2126c3f75d58e1c5a1eb2ec08cf8e291cce33d07"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000040)) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x104, 0x0, &(0x7f0000000740)=[@increfs_done, @free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x35}, @fda={0x66646185, 0x5, 0x1, 0x27}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}, 0x1000}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0xfffffff7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x8}, @fda={0x66646185, 0x0, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000000880)="c211ac5dec26e788250ed940d3732cb370f1ee26aed6e3db5c79690f5f870af76283c21fc11acd9818dc59fa4805cede2689e8e06a22fdfb2ae8f7a8c78013f799795a95204cd37289f694c1e8d6cd23b21549971e375315bb6628464c757d4463f647dc28ed8f392af8a568b68fb5ab158fdf6262ee107056d6e9a4536b6d2eafca14774403f25a6cbd01509539450ed249ac2ade4dbbac91e00babb0d1d4918a87b636abb68dc34097af0ec3dbddf64026418b104f0f2d786efe578a070a9a1de452579133291a60420f3d5285b4b43e0af10b0a2b9190545757380f03d2925d0642478fa311e1497c703b5a110bfe932daebe77af44d368dfba070c3160b30d7f7fb16cef993cdbf1f8531743b911b310d35e5f5ab05045b7302d33d2fe31aa3ba9fe3aed8c9a35819653cc6bea722206d66cea8dfe957382df986fc130775086206d33fb88fca31d557c67d6d6fe25205be75738d0c5932a9452af0f023fa37e921733b2b3272dac40c4fad1b80ce8c5f8a4ddd1be03c95b7810ace035fe794edfb05f785519d08eea8cc7f74f2df7495dbf4b3c791d9536d95f732155193ce89cb59c1ddfdace9aa160405222a910287a03f0fb44d5f9640e105a8d694f0683d6d5bef9917a5510c93e7b8cf497ddee0ce7000be877d1134b98bf466c19370aa9f52a45727c99034dc2a0fddd35fde0d187361bf207e5503208bc1c5ab9c65728c96abf4bff9f2c1d8d98358f7bfa0f1fe6ac1b878f33de573a3a047d3323e64814ba14921ed0c152e4380075efa3a7feafc3ec503c3f179b15a6cabf3daeb0b7586afda0746c828930e4b62e9884a1b53deb5eeb194d132b54f364289810d27d470e3ec1f6d36c6a67c5dbc2733091a441ed168d0fa197bc9f4b05c91b8fabe5babeab6ad7df2256c1157bbe5c87612f4ad35d747f02c737b10cdbeee9a652df7e0b1eaf03132af8c2364045072f8580bbecf0329a41f7e0edd6bd9685a05704a2f07f346ece9eccc5a010397fdfe5e639c4ce69e7513fb51da9e9bba461f16651eaf3655534d364e0d104553e63e4358843e5f1045da5aefd93758f67bdb4177c3dc4df339f945ef5e49a129ae007e2391979ecc46d9e84a795a3cfac5f4d66b019d535e8d1421caac0eeb9bb3e15f2533f4ba5e67528fa62e80b92d2f6e6ef8d53d5ce99b8af53f527b1c9536b5c6e2f08aed00853268a956145693c180353212c859bc60b46674397ad76dba9e331dda2be8e06ad04999e3ac30d6daed990df2e7ab1c29137ea890b3678eb216618d048bd40dd59bfbbc58246f20ee2a7cf62465c59189d58439e87e3d91409023a36b7dce4432ea87ca7d13980e885c19cb36d9f18604782bbdbbf8eca7f4b98fbe273af83fdca47af79a6d50eb2cebf9646b219e839763bcb7d14f816b2edbfb1b28e6410fb8c0e32d702271e9126ff99d2a522c0c09eff06ef4fb61e9f8f37b807778299d897aea5b9824dea191eb7dda132aaf342d536dc00348a3aad9b6c3467bb024d07fc1ddadbf12c08f0c6e70a1c98b2c83fe9c3ea9a5fc64090b3c76d25a946dcb3e9eab81011816b8faa9326d8ee54ae703570b423caf0c0644b37eaff3db414cea56381a14814e19ac2f2f8ebf234dd5fc800e9d29eafb3b014ac8953cb7eb6f0da2c4d9054ca74269bd9be82cde831ad60e3ef9f7bb1de76b098e5bac13175a72cc9ac3702b07be9e68649487578d2b8b0980f418394acb17a2a038acafbafb9f7032106e188a9592a3053ba8dde8662202008c5f464329613fe0969a32799eb01adedd85802e1bd05cc3ebcd13e68242584d06917472f4e17a7bb86c2d8bc02b77fecdcade63cbef694d9a987acf06777647345c9bbcdc9fe05f0a26f9c9245818a5386eaef2e9c9e02bd1f5a215882da60feace0466a6bd5fb6f4d028ab726e498c17e0fef2dfe45ca44abea88797c4848df9caa241c4b978dcc3f52db181c0eba1849c69a9d1fb1b1e804d5729de610c10d419001d01fafb4453837971b5388c262d2dd3182a997043adc289a176fa02d2174411d1ddf830909c7309ef085d3ea7951e5e5edf77a03ba123f5cf781ed930d44e5788b25cd1864ec07037e80bd4a374a0590015b8a0a0931047bbe40f1e18d2c3d5973cbbf42009b77cebbe022dbe68a0be673153de2614fc5fc3f3743444b74bb3217ebc03f03f599b58196cca12ca1a29730b510b45a2926da380484725bac6b77658757f2764d580aa9bbae27dd191bd86e9c88944ba3bb58d608814d07687f01a11c5b4fb44c846b1de4900c3700d4ffd8916b6fcd1570c34a5525ea8711352d8ebd36fdd1bc2e8361112aed0262ea943d3b03752effea451ded53ebba4cd30047388ce619a30723799903eb9cff6e99f29707b9d1ddebffd70516735cc2981ec13571052ae322054e0059583d32f5adacc772a9e2f71bdf0e25f6870e4441a549382e6403f7c6542a9de46f355558c7124e17c6035621e4634680a71dd6fab8411608145dd5b0ba6c986c3e71e1f7b1800fa57ec4ce84a97b1cc3127b623bea5d23ad239d22813ba46b01ef7c4d24371bfe720a87786d6c6e322fdce3af364e48aadf133e2524d5943008a6793d3414d090b8aaac032bdf6dcadbb7ecd27e4e6e819a92feefca5543d7b56e26606b61bfa6e9990c868aec90436861764f48034def3926f690ee2dc502d511c734f771ec85510fa758681febd9759e33cb1eb75e3b40f4179e9c7c8b9f78a672a53b029de63b490574c55fa554f901987d46d904c7937707d468a225bb9ed7f16bb1c51d07ffb6b1146c9c81964939f4e85612f944543fe834d233fb1ddf0ed1d4dedfc5faea1669d969643a3b5ef2b0c55729e7c1035cfe3aee3d38eb08e379fb087c62d81a42f1866fc72a0cc68eb3b3fe14900319ae45f56c752e4f073d63604728e1d8276735dd7e79bd91ff0e3362c5b05ce916d6f68e7cebed2c7d6726e84037aad3b4e84542a1e216861195d3b697a8e090d3b94624d1e7bf8fa6c142f7b9f163ac64fbe1c4eb098c871c00e3e192824c7fe6ed8fa63c0c835ce5950318e678b85ea3934f1c6b2631497431be32ab5df94377c85d006212da9a0053b84ea48c53e6d08c97d3f673850ced800ff1a6dd1ff836f0968adfe243366031016c7c1e6b6f37618c7897b2f84aa625e9269940835304d172df97cdadab834b9cde7c944dfcb9833fd27af0214e099a5ba4d5261851e003ba70fce3fd3d26fbf21e5e49c0ee7bd43aea3ac5424e5e64a51119c9b2d3dd4526148bbdc8836403c0a960abdc03acfba661d57b9a25d61581a5069061103d2a5efc31a916a20034648c29d7fe74af192c1872df316ed39a3d21a1814db2e812bdf5fd0d7b83c48376ca6717b7860e9887cbcd4d0383a222237de2171510cf021d63ff90758e77984e0719ae80be896d65fc13aa3eb239c84439672f229771e2b974f2ff5639f0ee6ff3477ceeb2ee24cb88dfd0dcb651ed26369c120eed78cf7b61283a4a3a7a13e07a5365840992437620767026ac97d7804a6fc90ea4962df17aa55db4cd5c6d59e09885c5d563ac29dafe83a7234ab617bb96dad08df0d121db4f068f9af57c3f97a7720d539be67780cfa237f73ebe7838f86311546583a8a28c6081e02650d057d737d1b1898f5992b00c5411bd59ec17bb5aef314295307895d0997a34a8ea6084cb8a4b27a604c8606ce47595b1f9bbb6109902d0ae541b55aaca3a514c95459d035a68f5d9992dbc27194111783674dff81bd035548df440fc9c0bc006836ba6c4ef3d7705e09cdcbc21749cabfb13b87697969580fbe1e700d6bb1960b185701103d780b6255a57098568cec3a4069b280cc16b35489d709e60837793e5df28ffbf73e85a93676bb5c1673b5df573fca0e46af621e9b22cfacc0b419bef67c22728b238e64a5da1d6a729ff1aa0053e91c93d9dc0ac8cecd91da7770205bb48e9c1a01988a4184fd4127c1b046ee675c66b43443171576213d89828402af45763d248b5f2fb405584ab27060f7769975b8ad682fc6ef15f5eb8d85d5a3868ab0857a8b48268ab68b61ea3158f4dbf869c1c6b4ee11600ac5ea90a7087d0580477fe14d60a988ee098f9299ff75eaf0f50d638ad1bed24eb85ab7d45d221971fbbfbc8ccdbb56370db21732041ab89fb08d42d67d6011246f25f22a8003724ebb7ea46b0c2986ec1196eaa5657815206bec4ecea3dac2367d28c4aeb458d0c1e53ae1b59f30015eb742102a59b11c7f63e108e7606bd93f7e14338ff89650f217d5e6ed85c1efd5d6bac06d386d45697e5bf9994f15a3d5df81097176e0de7812c43b76168498c5cc98f6f959d39a2ce57d73a7095eacd52990f8d90fc7ec14bfacffe86ba51e8c788bf706fa88b9abe66076976a76ca09d0a52079560f00fef5c30ed82acd66d740781028f7415ce437b954879d65eb7b1f851141f5527f43293f0b752c661e6a2e455e8c9e9c0c8bc15cb64977fad24ee617820796f4e36e6e00160c706ad9e313f9769d731eadcf20fed3e5dfd544a330955551b0aa130548653fbd36c9f617e2a68f4d4a2bbee3584b9baf504dded198b53bff6eb9d1f556027b9c5836b684a80149ec222b96c053924e46fe7e74012877fe2082906b88be67b889357a3994f1955e0e3fb9d1e85b814f4eed33e06fd3427c666850b45679abd3f50ba4bb246e360df5abc75a90f8eeeafeca906ba2abc4d07037a7c61a28dcac09503fc558214004beb866f7b613065c620706d7ee29494010b5e104dc2e6183f4fc1040e774433522235652fa1b899cdae2e38c34692aef80594305db8051cafd01eeead8cc4756c188e3b9cbb9ed734e9c41dc4f97b7d7e29f4de172b8e5e805693bf02a999897f30f0d9e69171b6845d35f80dfcea18f4c30f9a95e449b7a1c0c6a8bd0152ad6be468ca28cd71f2a1ddea6c4cbf2835d87ba4fbc065349890c58d93bd8513b4f3b6559bad6f2c99d4d5b3a857eef6fe5971e4bad9280002f1bf254a571b33fa9f23b4b202c05f13e35f9569e98caf3cfee01b1f88d66fffc4b68742ff1f6bde7d1ee7d711032c87a87dfcddb384d32e4c24e8c993fdbea947a2edbff12e4cbff3a21441739fb21c41c65296f437c64d00d5519590f8c09f3d223e6ecbe98e9a6787e0b5a7338180ad31aafe610688dc4bc0301de75be56ffb36f7bb958dd50244963e37feb48f3f8c45baeb41469c510568974f87968b9c5eef3aace54db9ecec27b48e9d7e33f8d528c3345d0dfba11fdf2100c842c25e393134a36d147deca769d8dede117a9131771e7e5ab55366ccc10c5dfcbcbe2945683fd00f301510ffc23b6db7d63098300f73b2821ffe332e62058c818e708d60db8251da96855fd58b5bc0ace8153e60ee14707e61718816aac5e50788135be74ffef6e814f4a310a19c09540d8f2af4c993745b8b732bd569bb062c722ae54c2ce86528339871f16ede55cecd22a2192f8a2dd178ad2fc71ca9cdcd591a3ab09869ece60d8da631fb726f1a480cb48e1161446bff105501ec92251d42f1c1d1687c5c44446767360836da2c764a945ca43cb2e652dadc05be139fd98c7f50d49041106e5647e73d8bd812b1b8fc51bdcf5db98e79e1baf84b37025083977248972cd1aba2414ec4544550a281dc8f0d686af7e9ffc376f13c993696e32d2a614f66cb0a1e2ac07f5bfca8189a94f312098503ca8aad933af3a053984634b1eec3cf765c1ca87d641f3ceb1df245f5ea96d4904ec4ae7a23e525f1a4f5a0b7fe"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) dup2(r3, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x8001) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r3) 14:12:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x104, 0x0, &(0x7f0000000740)=[@increfs_done, @free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x35}, @fda={0x66646185, 0x5, 0x1, 0x27}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}, 0x1000}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0xfffffff7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x8}, @fda={0x66646185, 0x0, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000000880)="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"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x104, 0x0, &(0x7f0000000740)=[@increfs_done, @free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x35}, @fda={0x66646185, 0x5, 0x1, 0x27}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}, 0x1000}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0xfffffff7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x8}, @fda={0x66646185, 0x0, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000000880)="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"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) dup2(r3, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82187201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r5) 14:12:53 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:53 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x104, 0x0, &(0x7f0000000740)=[@increfs_done, @free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x35}, @fda={0x66646185, 0x5, 0x1, 0x27}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}, 0x1000}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0xfffffff7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x8}, @fda={0x66646185, 0x0, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000000880)="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"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) dup2(r3, r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x104, 0x0, &(0x7f0000000740)=[@increfs_done, @free_buffer, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @fda={0x66646185, 0x9, 0x2, 0x35}, @fda={0x66646185, 0x5, 0x1, 0x27}}, &(0x7f0000000140)={0x0, 0x18, 0x34}}, 0x1000}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0xfffffff7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/211, 0xd3, 0x0, 0x8}, @fda={0x66646185, 0x0, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @decrefs={0x40046307, 0x3}], 0x1000, 0x0, &(0x7f0000000880)="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"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r3, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x0) (async) dup2(r3, r1) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x300) 14:12:54 executing program 3: socket$netlink(0x10, 0x3, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3455.141497][T13650] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:54 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2000000) 14:12:54 executing program 3: socket$netlink(0x10, 0x3, 0x13) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82187201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r1) (async) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82187201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r5) (async) [ 3455.546299][T13650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:54 executing program 3: socket$netlink(0x10, 0x3, 0x13) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 64) dup3(r2, r0, 0x0) (rerun: 64) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3455.650343][T13658] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:54 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463e668"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000740)={0x0, 0x109}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) syz_open_dev$tty1(0xc, 0x4, 0x4) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = dup(r10) bind$unix(r11, &(0x7f0000000080)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0x80000000}}, './file0\x00'}) poll(&(0x7f0000000100)=[{r3, 0x1}, {r2, 0x8}, {r0, 0x9000}, {r4, 0x430}, {r6, 0x4200}, {r2, 0x2002}, {r7, 0x409}, {r8, 0x4}, {r12, 0x6080}, {r2, 0x4020}], 0xa, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) bind$unix(r2, &(0x7f0000000080)=@abs, 0x6e) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r4 = openat$nci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82187201, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 32) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) (rerun: 32) dup2(r0, r5) 14:12:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463e668"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) (async) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000740)={0x0, 0x109}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) (async, rerun: 32) syz_open_dev$tty1(0xc, 0x4, 0x4) (async, rerun: 32) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = dup(r10) bind$unix(r11, &(0x7f0000000080)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0x80000000}}, './file0\x00'}) poll(&(0x7f0000000100)=[{r3, 0x1}, {r2, 0x8}, {r0, 0x9000}, {r4, 0x430}, {r6, 0x4200}, {r2, 0x2002}, {r7, 0x409}, {r8, 0x4}, {r12, 0x6080}, {r2, 0x4020}], 0xa, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463e668"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x48) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000740)={0x0, 0x109}) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r7) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = dup(r8) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r10 = socket$inet_smc(0x2b, 0x1, 0x0) r11 = dup(r10) bind$unix(r11, &(0x7f0000000080)=@abs, 0x6e) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r9, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r8, {0x80000000}}, './file0\x00'}) poll(&(0x7f0000000100)=[{r3, 0x1}, {r2, 0x8}, {r0, 0x9000}, {r4, 0x430}, {r6, 0x4200}, {r2, 0x2002}, {r7, 0x409}, {r8, 0x4}, {r12, 0x6080}, {r2, 0x4020}], 0xa, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = dup2(r0, r7) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) sendfile(r10, r2, &(0x7f0000000140)=0x2, 0x7fffffff) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xa4e, 0x0, 0x438}, {0x2dc, 0x0, 0x9}, {0x9b8, 0x0, 0x5}, {0x61b, 0x0, 0x1000}]}) 14:12:55 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x3000000) 14:12:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x700) 14:12:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xffc1, &(0x7f0000000080)='dummy0\x00', 0xfffffffffffff55f, 0x9, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xffc1, &(0x7f0000000080)='dummy0\x00', 0xfffffffffffff55f, 0x9, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xffc1, &(0x7f0000000080)='dummy0\x00', 0xfffffffffffff55f, 0x9, 0x7}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) dup2(r0, r7) (async) r8 = dup2(r0, r7) r9 = socket$inet_smc(0x2b, 0x1, 0x0) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) sendfile(r10, r2, &(0x7f0000000140)=0x2, 0x7fffffff) (async) sendfile(r10, r2, &(0x7f0000000140)=0x2, 0x7fffffff) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xa4e, 0x0, 0x438}, {0x2dc, 0x0, 0x9}, {0x9b8, 0x0, 0x5}, {0x61b, 0x0, 0x1000}]}) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xa4e, 0x0, 0x438}, {0x2dc, 0x0, 0x9}, {0x9b8, 0x0, 0x5}, {0x61b, 0x0, 0x1000}]}) 14:12:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x7000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:55 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xffc1, &(0x7f0000000080)='dummy0\x00', 0xfffffffffffff55f, 0x9, 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @rand_addr=0x64010100}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xffc1, &(0x7f0000000080)='dummy0\x00', 0xfffffffffffff55f, 0x9, 0x7}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000740)={0x0, "6c7a2deb8689b47e057a35c1d5b0b4dd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3457.126781][T13736] netlink: 'syz-executor.4': attribute type 27 has an invalid length. 14:12:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = dup2(r0, r7) r9 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r9) (async) r10 = dup(r9) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) (async) bind$unix(r10, &(0x7f0000000080)=@abs, 0x6e) sendfile(r10, r2, &(0x7f0000000140)=0x2, 0x7fffffff) (async) sendfile(r10, r2, &(0x7f0000000140)=0x2, 0x7fffffff) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x4, 0x0, [{0xa4e, 0x0, 0x438}, {0x2dc, 0x0, 0x9}, {0x9b8, 0x0, 0x5}, {0x61b, 0x0, 0x1000}]}) 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000740)={0x0, "6c7a2deb8689b47e057a35c1d5b0b4dd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3457.239729][T13740] netlink: 'syz-executor.0': attribute type 27 has an invalid length. 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000740)={0x0, "6c7a2deb8689b47e057a35c1d5b0b4dd"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3457.425198][T13740] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) lseek(r0, 0x6, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffea1, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f0000000000)={0xfffff7b4, 0x5, 0x4, 0x2, 0x7}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x3, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) lseek(r0, 0x6, 0x1) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffea1, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) lseek(r0, 0x6, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffea1, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000040)=ANY=[], 0xfffffffffffffea1, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:56 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0xfffffef3, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:56 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x4000000) 14:12:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x900) 14:12:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0xfffffef3, 0x0, 0x0}) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async, rerun: 64) dup3(r2, r0, 0x0) (rerun: 64) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (rerun: 64) 14:12:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0xfffffef3, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r2, r0, 0x0) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0xfffffef3, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r2, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffffff}) dup2(r0, r4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f0000000000)={0xfffff7b4, 0x5, 0x4, 0x2, 0x7}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r8 = dup(r7) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x3, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4}) (async) dup2(r0, r4) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) dup(r5) (async) bind$unix(r6, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_ASSIGN_SET_INTX_MASK(r6, 0x4040aea4, &(0x7f0000000000)={0xfffff7b4, 0x5, 0x4, 0x2, 0x7}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) dup(r7) (async) bind$unix(r8, &(0x7f0000000080)=@abs, 0x6e) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x3, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) (async) 14:12:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x8000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x2, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) 14:12:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3458.906289][T13805] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 14:12:57 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:57 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x7000000) 14:12:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/15, 0xf, 0x2, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}, @decrefs={0x40046307, 0x3}, @decrefs], 0x5d, 0x0, &(0x7f0000000340)="5cfc24adf22940f0559ebb609dbb7b5f1d703489802d53d9ef6c503360f9db1800b470b459052c2326105b43ca7b022ebb51bc3052164e828666b7e526b530e6215165fd326a8e2ee7e94ce7e1b74aaabdf0c6c3d18f668bf64f59fb9d"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000440)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x8c, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x2, 0x1f}, @fda={0x66646185, 0x8, 0x0, 0x38}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}}, @dead_binder_done], 0x80, 0x0, &(0x7f0000000680)="5448114e0398385f2e121d6d2a7a61ef3671c9bf2fe9fc427857d0461345470453fcc31cddd1b91e6170dea000cac55a18c53de1a91f8fdd56e60754b8384ae1d304fd4010e1470c874d26bf2200d5f6415e99349c62928e6c8a35100fdeb6297df65d1092514f97a281cfa6b2f98a70084b6de1c930392829fc26acc7325012"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) 14:12:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/15, 0xf, 0x2, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}, @decrefs={0x40046307, 0x3}, @decrefs], 0x5d, 0x0, &(0x7f0000000340)="5cfc24adf22940f0559ebb609dbb7b5f1d703489802d53d9ef6c503360f9db1800b470b459052c2326105b43ca7b022ebb51bc3052164e828666b7e526b530e6215165fd326a8e2ee7e94ce7e1b74aaabdf0c6c3d18f668bf64f59fb9d"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000440)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x8c, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x2, 0x1f}, @fda={0x66646185, 0x8, 0x0, 0x38}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}}, @dead_binder_done], 0x80, 0x0, &(0x7f0000000680)="5448114e0398385f2e121d6d2a7a61ef3671c9bf2fe9fc427857d0461345470453fcc31cddd1b91e6170dea000cac55a18c53de1a91f8fdd56e60754b8384ae1d304fd4010e1470c874d26bf2200d5f6415e99349c62928e6c8a35100fdeb6297df65d1092514f97a281cfa6b2f98a70084b6de1c930392829fc26acc7325012"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/15, 0xf, 0x2, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}, @decrefs={0x40046307, 0x3}, @decrefs], 0x5d, 0x0, &(0x7f0000000340)="5cfc24adf22940f0559ebb609dbb7b5f1d703489802d53d9ef6c503360f9db1800b470b459052c2326105b43ca7b022ebb51bc3052164e828666b7e526b530e6215165fd326a8e2ee7e94ce7e1b74aaabdf0c6c3d18f668bf64f59fb9d"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x802, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) (async) openat$binderfs(0xffffff9c, &(0x7f0000000440)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x8c, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x2, 0x1f}, @fda={0x66646185, 0x8, 0x0, 0x38}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}}, @dead_binder_done], 0x80, 0x0, &(0x7f0000000680)="5448114e0398385f2e121d6d2a7a61ef3671c9bf2fe9fc427857d0461345470453fcc31cddd1b91e6170dea000cac55a18c53de1a91f8fdd56e60754b8384ae1d304fd4010e1470c874d26bf2200d5f6415e99349c62928e6c8a35100fdeb6297df65d1092514f97a281cfa6b2f98a70084b6de1c930392829fc26acc7325012"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) 14:12:58 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x3f00) 14:12:58 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/245, 0xf5, 0x0, 0x2f}, @ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/15, 0xf, 0x2, 0xc}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)={0x0, 0x28, 0x50}}}, @decrefs={0x40046307, 0x3}, @decrefs], 0x5d, 0x0, &(0x7f0000000340)="5cfc24adf22940f0559ebb609dbb7b5f1d703489802d53d9ef6c503360f9db1800b470b459052c2326105b43ca7b022ebb51bc3052164e828666b7e526b530e6215165fd326a8e2ee7e94ce7e1b74aaabdf0c6c3d18f668bf64f59fb9d"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x802, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) r2 = openat$binderfs(0xffffff9c, &(0x7f0000000440)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x8c, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x2, 0x1f}, @fda={0x66646185, 0x8, 0x0, 0x38}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}}, @dead_binder_done], 0x80, 0x0, &(0x7f0000000680)="5448114e0398385f2e121d6d2a7a61ef3671c9bf2fe9fc427857d0461345470453fcc31cddd1b91e6170dea000cac55a18c53de1a91f8fdd56e60754b8384ae1d304fd4010e1470c874d26bf2200d5f6415e99349c62928e6c8a35100fdeb6297df65d1092514f97a281cfa6b2f98a70084b6de1c930392829fc26acc7325012"}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x8c, 0x0, &(0x7f0000000740)=[@request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x2, 0x1f}, @fda={0x66646185, 0x8, 0x0, 0x38}}, &(0x7f00000004c0)={0x0, 0x18, 0x34}}}, @dead_binder_done], 0x80, 0x0, &(0x7f0000000680)="5448114e0398385f2e121d6d2a7a61ef3671c9bf2fe9fc427857d0461345470453fcc31cddd1b91e6170dea000cac55a18c53de1a91f8fdd56e60754b8384ae1d304fd4010e1470c874d26bf2200d5f6415e99349c62928e6c8a35100fdeb6297df65d1092514f97a281cfa6b2f98a70084b6de1c930392829fc26acc7325012"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3459.383516][ T29] INFO: task kworker/1:0:1102 blocked for more than 143 seconds. [ 3459.401599][ T29] Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 3459.431608][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3459.449816][ T29] task:kworker/1:0 state:D stack:24608 pid:1102 tgid:1102 ppid:2 flags:0x00004000 [ 3459.460305][ T29] Workqueue: usb_hub_wq hub_event [ 3459.469073][ T29] Call Trace: [ 3459.473474][ T29] [ 3459.476645][ T29] __schedule+0xf12/0x5c00 [ 3459.481360][ T29] ? rcu_is_watching+0x12/0xb0 [ 3459.500137][ T29] ? io_schedule_timeout+0x150/0x150 [ 3459.517898][ T29] ? lock_release+0x4bf/0x690 14:12:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000040)="15f4ed8102d7d34239635dc8b25ae5ee770970afde2950be17f2e6c2a81d7a61e6ddd0", 0x23, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000140)="7dcd081049f166cc52aae383686dfa705db4c8232596b78b631637476b089d1d045b3b7429422c49bcbbd63eaec5d605b9711b5a9891377f3f30fb79540f758ed6febb9b9378de8d0ce73ea7e13180b16319edfb899573c76cd0b9b4a448c8851b061eb781c7f8539a88bc79aacbb17a91af720629948e0f39c42ebc0761615006fee8877416", 0x86, 0x401, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc897, 0xffffffffffffffff, &(0x7f0000000240)="b67b1aeb0761d60810df80dfc9dbc9d7556dd76c425cb241f50dee916d4238112780a548e47b9f04a9c04956cc4a7f1402e9a4061204fe5331ddc9e1cbac50214ee0c3ff0b14962a97c436d720ae0587864336d6d0f7f7f7e9c91398973645043b2e32b082051a81d3c63ec54be5edabf698b7857c4859f86b116f0ca705c8b92b667be6a52c2841a5f8de7050eec5dcc87764804b8ce88054cf620601fc0daa25e0ae51240b1a230c01fe2c4395fe8a48b1337aa00533e332ae", 0xba, 0x101}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) dup2(r1, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r4, r1, 0x0) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3459.558320][ T29] ? schedule+0x1fc/0x270 [ 3459.565878][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 3459.579620][ T29] ? spin_bug+0x1d0/0x1d0 [ 3459.597447][ T29] ? rcu_is_watching+0x12/0xb0 [ 3459.624468][ T29] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 3459.658406][ T29] schedule+0xe9/0x270 [ 3459.672800][ T29] usb_kill_urb.part.0+0x1c6/0x250 [ 3459.692804][ T29] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 3459.709878][ T29] ? prepare_to_swait_exclusive+0x240/0x240 14:12:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) (async) io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000040)="15f4ed8102d7d34239635dc8b25ae5ee770970afde2950be17f2e6c2a81d7a61e6ddd0", 0x23, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000140)="7dcd081049f166cc52aae383686dfa705db4c8232596b78b631637476b089d1d045b3b7429422c49bcbbd63eaec5d605b9711b5a9891377f3f30fb79540f758ed6febb9b9378de8d0ce73ea7e13180b16319edfb899573c76cd0b9b4a448c8851b061eb781c7f8539a88bc79aacbb17a91af720629948e0f39c42ebc0761615006fee8877416", 0x86, 0x401, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc897, 0xffffffffffffffff, &(0x7f0000000240)="b67b1aeb0761d60810df80dfc9dbc9d7556dd76c425cb241f50dee916d4238112780a548e47b9f04a9c04956cc4a7f1402e9a4061204fe5331ddc9e1cbac50214ee0c3ff0b14962a97c436d720ae0587864336d6d0f7f7f7e9c91398973645043b2e32b082051a81d3c63ec54be5edabf698b7857c4859f86b116f0ca705c8b92b667be6a52c2841a5f8de7050eec5dcc87764804b8ce88054cf620601fc0daa25e0ae51240b1a230c01fe2c4395fe8a48b1337aa00533e332ae", 0xba, 0x101}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) (async) dup2(r1, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r4, r1, 0x0) (async) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3459.731336][ T29] ? preempt_count_sub+0x160/0x160 [ 3459.755655][ T29] usb_kill_urb+0x83/0xa0 [ 3459.776314][ T29] usb_start_wait_urb+0x251/0x4c0 [ 3459.823812][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 3459.847161][ T29] usb_control_msg+0x327/0x4a0 14:12:58 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r0) io_submit(0x0, 0x3, &(0x7f0000000340)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000040)="15f4ed8102d7d34239635dc8b25ae5ee770970afde2950be17f2e6c2a81d7a61e6ddd0", 0x23, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x8, r0, &(0x7f0000000140)="7dcd081049f166cc52aae383686dfa705db4c8232596b78b631637476b089d1d045b3b7429422c49bcbbd63eaec5d605b9711b5a9891377f3f30fb79540f758ed6febb9b9378de8d0ce73ea7e13180b16319edfb899573c76cd0b9b4a448c8851b061eb781c7f8539a88bc79aacbb17a91af720629948e0f39c42ebc0761615006fee8877416", 0x86, 0x401, 0x0, 0x3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xc897, 0xffffffffffffffff, &(0x7f0000000240)="b67b1aeb0761d60810df80dfc9dbc9d7556dd76c425cb241f50dee916d4238112780a548e47b9f04a9c04956cc4a7f1402e9a4061204fe5331ddc9e1cbac50214ee0c3ff0b14962a97c436d720ae0587864336d6d0f7f7f7e9c91398973645043b2e32b082051a81d3c63ec54be5edabf698b7857c4859f86b116f0ca705c8b92b667be6a52c2841a5f8de7050eec5dcc87764804b8ce88054cf620601fc0daa25e0ae51240b1a230c01fe2c4395fe8a48b1337aa00533e332ae", 0xba, 0x101}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) dup(r2) (async) r3 = dup(r2) bind$unix(r3, &(0x7f0000000080)=@abs, 0x6e) dup2(r1, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r4, r1, 0x0) (async) dup3(r4, r1, 0x0) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) [ 3459.958750][ T29] ? usb_start_wait_urb+0x4c0/0x4c0 [ 3460.010479][ T29] ? hub_resume+0x3e0/0x3e0 [ 3460.024802][ T29] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 3460.154128][ T29] hub_port_init+0x680/0x3820 14:12:59 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x3, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3460.185453][ T29] hub_event+0x2b61/0x4e10 14:12:59 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r2 = syz_clone(0x4c0c2080, &(0x7f0000000140)="d2a3cb4d53baa3db68f09ed93882b19655fe857e5835f7bff1958bcf42a582d95096754dd34c45c01854757dae7208b76bcbb5f65c4685978b47eccfac60cf6ddab0f3e75fb2b17cc530d74c2727aab4bcb5feb3aeba248cb97d0676b90659c910f2bb95ebfadaf29f75a8cccab3b990e2fe7a2b74dfd8f7769de4b7564246377834504a41cc6f3f14ad1ae09f1cdcd34fbb8f9a44a0a1f7573863eb3fceab4b597cb1b42d235a5c547cc391315d686cdb9c", 0xb2, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)="6dd5868d703bedf81c6eb9ae7b7f9d3b1eaaf503b644c7813d2dc2686357a6e90ac95fae77ef4aeedce19841e506f26ea251b61c3486b5bfcce3cae9940323bb9e9a062b9184bd6fe4ff") ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000280)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000001740)=[@free_buffer, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x0, 0x3d}, @fda={0x66646185, 0xa, 0x1, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/47, 0x2f, 0x1, 0x36}}, &(0x7f0000000380)={0x0, 0x28, 0x44}}}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x8, 0x1, 0x33}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/112, 0x70, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x1c, 0x34}}}, @register_looper, @clear_death={0x400c630f, 0x1}], 0xd6, 0x0, &(0x7f0000001800)="f5b8695db51855b93224a409540d6897ce70aa59464252d4c33cc8d8fd9ffd9863030bde13a97e0b897b93cbdab9ed48d763a616ed6b99771fa92cd989057ed929176f763581006eef4340cd7d96286886b717fa56ba428cfa5451b4b75e6f7182f49e0bdd30b8c3eb6f6c0a608f172120f29a6a90a9188cdc1a58386edfc2c4dc156d9f1a5428832b1ad810fee1229e64b73acb4ea42632e061d8e395faa6ea2b2465a2b2ab0511e473d15b6cecc26d1bbd05ede7429c1f40fb2b8880632fcef357d02104dc8fbf416b33bffdad10c58fe6948949e7"}) [ 3460.222971][ T29] ? hub_port_debounce+0x3d0/0x3d0 [ 3460.228151][ T29] ? lock_acquire+0x464/0x520 [ 3460.280489][ T29] ? check_irq_usage+0x1011/0x1490 [ 3460.293882][ T29] ? lock_sync+0x190/0x190 14:12:59 executing program 2: syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x8000000) [ 3460.422717][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 3460.438474][ T29] ? spin_bug+0x1d0/0x1d0 [ 3460.457537][ T29] process_one_work+0x886/0x15d0 [ 3460.487429][ T29] ? hcd_died_work+0x60/0x60 [ 3460.505543][ T29] ? workqueue_congested+0x300/0x300 [ 3460.521188][ T29] ? assign_work+0x1a0/0x250 [ 3460.538382][ T29] worker_thread+0x8b9/0x1290 14:12:59 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000006440)={0x0, 0x21, &(0x7f00000063c0)=[{&(0x7f0000000600)={0x40, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x9000000}, @typed={0x29, 0x0, 0x0, 0x0, @uid}, @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@loopback={0x21}}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x40}], 0x1}, 0x0) [ 3460.560816][ T29] ? process_one_work+0x15d0/0x15d0 [ 3460.572642][ T29] kthread+0x2c6/0x3a0 [ 3460.582370][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3460.594757][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3460.610899][ T29] ret_from_fork+0x45/0x80 [ 3460.616527][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3460.632119][T13845] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 3460.650896][ T29] ret_from_fork_asm+0x11/0x20 [ 3460.656410][ T29] 14:12:59 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x1000000000000, 0x0}) r2 = syz_clone(0x4c0c2080, &(0x7f0000000140)="d2a3cb4d53baa3db68f09ed93882b19655fe857e5835f7bff1958bcf42a582d95096754dd34c45c01854757dae7208b76bcbb5f65c4685978b47eccfac60cf6ddab0f3e75fb2b17cc530d74c2727aab4bcb5feb3aeba248cb97d0676b90659c910f2bb95ebfadaf29f75a8cccab3b990e2fe7a2b74dfd8f7769de4b7564246377834504a41cc6f3f14ad1ae09f1cdcd34fbb8f9a44a0a1f7573863eb3fceab4b597cb1b42d235a5c547cc391315d686cdb9c", 0xb2, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000200)="6dd5868d703bedf81c6eb9ae7b7f9d3b1eaaf503b644c7813d2dc2686357a6e90ac95fae77ef4aeedce19841e506f26ea251b61c3486b5bfcce3cae9940323bb9e9a062b9184bd6fe4ff") ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000280)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000005c0)=[@register_looper], 0x4, 0x0, &(0x7f0000000500)="1384bc15"}) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = dup(r3) bind$unix(r4, &(0x7f0000000080)=@abs, 0x6e) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000001740)=[@free_buffer, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x0, 0x3d}, @fda={0x66646185, 0xa, 0x1, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/47, 0x2f, 0x1, 0x36}}, &(0x7f0000000380)={0x0, 0x28, 0x44}}}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x8, 0x1, 0x33}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/112, 0x70, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x1c, 0x34}}}, @register_looper, @clear_death={0x400c630f, 0x1}], 0xd6, 0x0, &(0x7f0000001800)="f5b8695db51855b93224a409540d6897ce70aa59464252d4c33cc8d8fd9ffd9863030bde13a97e0b897b93cbdab9ed48d763a616ed6b99771fa92cd989057ed929176f763581006eef4340cd7d96286886b717fa56ba428cfa5451b4b75e6f7182f49e0bdd30b8c3eb6f6c0a608f172120f29a6a90a9188cdc1a58386edfc2c4dc156d9f1a5428832b1ad810fee1229e64b73acb4ea42632e061d8e395faa6ea2b2465a2b2ab0511e473d15b6cecc26d1bbd05ede7429c1f40fb2b8880632fcef357d02104dc8fbf416b33bffdad10c58fe6948949e7"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000001740)=[@free_buffer, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/4096, 0x1000, 0x0, 0x3d}, @fda={0x66646185, 0xa, 0x1, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/47, 0x2f, 0x1, 0x36}}, &(0x7f0000000380)={0x0, 0x28, 0x44}}}, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x8, 0x1, 0x33}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/112, 0x70, 0x1, 0x1f}}, &(0x7f00000003c0)={0x0, 0x1c, 0x34}}}, @register_looper, @clear_death={0x400c630f, 0x1}], 0xd6, 0x0, &(0x7f0000001800)="f5b8695db51855b93224a409540d6897ce70aa59464252d4c33cc8d8fd9ffd9863030bde13a97e0b897b93cbdab9ed48d763a616ed6b99771fa92cd989057ed929176f763581006eef4340cd7d96286886b717fa56ba428cfa5451b4b75e6f7182f49e0bdd30b8c3eb6f6c0a608f172120f29a6a90a9188cdc1a58386edfc2c4dc156d9f1a5428832b1ad810fee1229e64b73acb4ea42632e061d8e395faa6ea2b2465a2b2ab0511e473d15b6cecc26d1bbd05ede7429c1f40fb2b8880632fcef357d02104dc8fbf416b33bffdad10c58fe6948949e7"}) [ 3460.665445][ T29] INFO: lockdep is turned off. [ 3460.682767][ T29] NMI backtrace for cpu 1 [ 3460.687132][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 3460.696604][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3460.706675][ T29] Call Trace: [ 3460.709965][ T29] [ 3460.712895][ T29] dump_stack_lvl+0xd9/0x1b0 [ 3460.717503][ T29] nmi_cpu_backtrace+0x277/0x390 [ 3460.722433][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 3460.727632][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 3460.733617][ T29] watchdog+0xf87/0x1210 [ 3460.737854][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 3460.743824][ T29] ? __kthread_parkme+0x14b/0x220 [ 3460.748845][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 3460.754839][ T29] kthread+0x2c6/0x3a0 [ 3460.758950][ T29] ? kthread_complete_and_exit+0x40/0x40 14:12:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x20000) [ 3460.764571][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3460.770540][ T29] ret_from_fork+0x45/0x80 [ 3460.774962][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3460.780611][ T29] ret_from_fork_asm+0x11/0x20 [ 3460.785389][ T29] [ 3460.789497][ T29] Sending NMI from CPU 1 to CPUs 0: [ 3460.795054][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1b/0x20 [ 3460.898274][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 3460.905180][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.7.0-syzkaller-09928-g052d534373b7 #0 [ 3460.914657][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 3460.924729][ T29] Call Trace: [ 3460.928024][ T29] [ 3460.930962][ T29] dump_stack_lvl+0xd9/0x1b0 [ 3460.935583][ T29] panic+0x6dc/0x790 [ 3460.941376][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 3460.946521][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 3460.951928][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 3460.957245][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 3460.962630][ T29] ? watchdog+0xd3e/0x1210 [ 3460.967070][ T29] ? watchdog+0xd31/0x1210 [ 3460.971489][ T29] watchdog+0xd4f/0x1210 [ 3460.975733][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 3460.981716][ T29] ? __kthread_parkme+0x14b/0x220 [ 3460.986737][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 3460.992727][ T29] kthread+0x2c6/0x3a0 [ 3460.996966][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3461.002597][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3461.008232][ T29] ret_from_fork+0x45/0x80 [ 3461.012650][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 3461.018281][ T29] ret_from_fork_asm+0x11/0x20 [ 3461.023060][ T29] [ 3461.026306][ T29] Kernel Offset: disabled [ 3461.030620][ T29] Rebooting in 86400 seconds..