000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000010000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xe00) 05:26:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000080601ffff0000000000000000000000050001000700000009f3010073797a3000000000"], 0x28}}, 0x0) 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xec0) 05:26:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0019000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000fffffff000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 491.625674][T28279] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 491.643055][T28279] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 491.734406][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000024000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e2efb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf00) [ 491.778263][T28282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c004c000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 491.890920][T28296] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 491.905874][T28296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x3f00) 05:26:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000f0ffff00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0060000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f2efb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000038000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x6000) [ 492.059496][T28303] binder_alloc: 28301: binder_alloc_buf, no vma [ 492.093619][T28303] binder: 28301:28303 ioctl 5411 20000000 returned -22 [ 492.138102][T28303] binder: BINDER_SET_CONTEXT_MGR already set [ 492.150077][T28313] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 492.155478][T28303] binder: 28301:28303 ioctl 40046207 0 returned -16 [ 492.170408][T28314] binder: 28301:28314 ioctl 5411 20000000 returned -22 05:26:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c006c000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000048000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010400000000000000000e00000028000e00250fbf9215a7b6c449ac754ab00b217f30617ec774ac50a10e3fb0eb7ba19f1d2b000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000811}, 0x44000090) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/78) 05:26:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000102efb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00007fffffff00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc00e) 05:26:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00f0000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000002ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 492.395052][T28330] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 492.413941][T28329] binder_alloc: 28327: binder_alloc_buf, no vma [ 492.447063][T28329] binder: 28327:28329 ioctl 81007702 20000100 returned -22 05:26:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000020008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf000) [ 492.494672][T28338] binder_alloc: 28327: binder_alloc_buf, no vma [ 492.524623][T28338] binder: 28327:28338 ioctl 81007702 20000100 returned -22 05:26:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000030000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00009effffff00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:19 executing program 3: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000030008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000012ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x34000) 05:26:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000050000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000022ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000040008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="056352579b4850379a4991a8e0a4600d67dfe93afbd3d80ac680faf3a11f6fb17ce186b9e5b9441af8ecce7962451c3bdd5a0e45565aa8b7d4fe2d18e84705746020cb2ad94eb87c77cc6649a6eb97f5f88d9c608d4ade763fb1a9355b693f0a4c6a68d03fcf24ecee8c385ae6ef851fa70f3808657b24dd"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r2) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0263daeb"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="40000000c08cf72fadb09cf61c7bd8c45bdf9930efadaa5327fc57b114fc0834aa88d460cf8931c0187865381c3f9bc09278d21299c9995f406a31007d931f1b8a294b76023cbee5880fe0ebd71042be43478e97f447fe10669e8e01a444ba7314355789dcac89a0747130bf99a64d46edbcfccca2bf1a48a3914a52c9fa58b4ca22889404"], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000240)={0x2, 0x5, 0xd87, 0x4}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000180)) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0x1000}}, 0x30) r5 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x40000, 0x5f) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2018c2}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES32]], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000806010100000000000000000000000005000100070000000900020073797a3000000000455c3c8f762e5654c1f3f8202a9c04f37c4c4b5c949921e41ce49af6f4325f520f756d00df3d25c262b108104c8893eb40ee11d46db4afe6902ec2ee2732eaa5a75462c83abccfd3b72e5658c8fea9"], 0x1}}, 0x22000001) socket$netlink(0x10, 0x3, 0xc) 05:26:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x400300) 05:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000032ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000f0ffffff00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000060000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000a0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 492.961881][T28370] binder: 28369:28370 unknown command 1465017093 [ 492.986401][T28370] binder: 28369:28370 ioctl c0306201 20000200 returned -22 05:26:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0ffff) [ 493.021587][T28370] binder: BINDER_SET_CONTEXT_MGR already set [ 493.051853][T28370] binder: 28369:28370 ioctl 40046207 0 returned -16 [ 493.068637][T28375] binder: 28369:28375 ioctl 80047013 20000180 returned -22 05:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000042ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 493.100192][T28375] binder: 28369:28375 ioctl 80047013 20000180 returned -22 05:26:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000000)=0xff, 0x4) 05:26:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000070000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x1000000) 05:26:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000e0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000034000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 493.291203][T28393] binder_alloc: 28391: binder_alloc_buf, no vma 05:26:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x2000000) 05:26:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0066080000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000140008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 493.344141][T28398] binder_alloc: 28391: binder_alloc_buf, no vma 05:26:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000052ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000080601150000000000000000000000000500011d01000000090002007379ca78f55ce400"], 0x28}}, 0x0) 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x3000000) 05:26:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000600008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000090000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000fffffffffffff000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x3c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa8b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x286}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200000c1}, 0x4) 05:26:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000062ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000f00008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000a0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000000) [ 493.749204][T28424] binder_alloc: 28423: binder_alloc_buf, no vma [ 493.773606][T28429] binder_alloc: 28423: binder_alloc_buf, no vma 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xa000000) 05:26:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000b0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 493.810489][T28424] binder: 28423:28424 ioctl c0306201 20000100 returned -14 05:26:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000b20208000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) splice(r3, &(0x7f0000000100), r2, 0x0, 0x800000a, 0x0) sendfile(r0, r3, &(0x7f0000000180)=0x80000001, 0x83f) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r1) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VIDIOC_QUERYBUF(r5, 0xc0445609, &(0x7f0000000100)={0x7f, 0x7, 0x4, 0x20000, 0x7fffffff, {}, {0x3, 0x2, 0x1, 0x5, 0x8, 0x1f, "3b3e85e7"}, 0x6a9, 0x1, @planes=&(0x7f0000000000)={0x3, 0x0, @mem_offset=0x7fff, 0x81}, 0xfffffffd, 0x0, r0}) readlinkat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=""/187, 0xbb) 05:26:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000001000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000072ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc080000) 05:26:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000308000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000c0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 494.022674][T28445] binder: 28443:28445 ioctl c0306201 20000200 returned -14 [ 494.086817][T28445] binder: 28443:28445 ioctl c0306201 20000280 returned -14 [ 494.118781][T28445] binder: 28443:28445 ioctl c0306201 20000100 returned -14 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xe000000) [ 494.157920][T28445] binder: 28443:28445 ioctl c0445609 20000100 returned -22 [ 494.195594][T28450] binder: 28443:28450 ioctl c0306201 20000280 returned -14 05:26:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000082ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 494.204132][T28460] binder: 28443:28460 ioctl c0306201 20000100 returned -14 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf000000) [ 494.240383][T28445] binder: 28443:28445 ioctl c0445609 20000100 returned -22 05:26:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000a08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000e0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000002000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000886090100000000000000000000000005000100070000000900020073797a3000000000"], 0x28}}, 0x0) 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x3f000000) 05:26:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000092ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x60000000) 05:26:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000e08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000140000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x140e, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r5}, 0x14) read$usbmon(r0, &(0x7f0000000000)=""/58, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000003000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x9effffff) 05:26:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000190000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a2ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 494.664663][T28493] binder_alloc: 28491: binder_alloc_buf, no vma 05:26:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000001408000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xc00e0000) 05:26:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000004000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b2ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c2ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xf0ffffff) 05:26:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000003f08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x148, r3, 0x301, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x4}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x4}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1000}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000a000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00004c0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xfffff000) 05:26:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d2ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000006008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xffffff7f) 05:26:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000002b208000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000600000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 495.750096][T28544] binder_alloc: 28543: binder_alloc_buf, no vma 05:26:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e2ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xffffff9e) 05:26:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000e000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 495.801872][T28544] binder: BINDER_SET_CONTEXT_MGR already set [ 495.832817][T28544] binder: 28543:28544 ioctl 40046207 0 returned -16 05:26:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806010100000000000000000000000004000100070000000900020073797a3000000000"], 0x28}}, 0x0) 05:26:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000f008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0008660000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xfffffff0) 05:26:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00006c0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 496.014467][T28567] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 05:26:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f2ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:22 executing program 3: r0 = openat$tun(0xffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x480102, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000003000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0xffffffff) 05:26:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000014000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000f00000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r6, 0x0) splice(r6, &(0x7f0000000100), r5, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r8, 0x0) splice(r8, &(0x7f0000000100), r7, 0x0, 0x800000a, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[0xffffffffffffffff, r1, r0, r3, r5, r7]}, 0x6) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 496.246036][T28587] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:22 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000102ffb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:22 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000208000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:22 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000008ed16b58000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000400300000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000308000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000030fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xbb8, 0x1, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x2}, 0x41, 0x0, 0x6, 0x0, 0x1, 'syz0\x00', "57a730e25534a79e727b4e2fe7ba9a90567171b3cb90cefb6376677ab5980bf0", "9f2c154a53c7d4ead6847ff92eec1a409b228b65020ec7aec3598c6fa965a172", [{0x6855, 0x1, {0x0, 0x2}}, {0xaa, 0xfbff, {0x1, 0xfffff800}}, {0x0, 0x9, {0x0, 0x8001}}, {0x4, 0x3ff, {0x3, 0x3}}, {0x7ff, 0x3f, {0x3, 0xe2d}}, {0xed, 0x0, {0x2, 0xa8}}, {0x3f, 0x101, {0x0, 0x5}}, {0x7ff, 0x9, {0x2, 0x3}}, {0x0, 0x3, {0x3, 0x7}}, {0x0, 0x4f43, {0x0, 0x1}}, {0xfffa, 0x3, {0x0, 0xcee2}}, {0x5c6, 0x40, {0x0, 0x2}}, {0xf339, 0x80, {0x3, 0x7}}, {0x5, 0x6, {0x2, 0x142fa31e}}, {0x0, 0x4, {0x0, 0xfff}}, {0x5, 0x100, {0x0, 0x5}}, {0x1a5, 0x1, {0x2, 0x1}}, {0x1000, 0x7, {0x2, 0x2}}, {0x6e49, 0x70f, {0x0, 0x1}}, {0xfff, 0x1, {0x0, 0x101}}, {0x6, 0xff66, {0x2, 0x1}}, {0xff, 0x6}, {0x2, 0x9dc, {0x1, 0x3}}, {0x791, 0x1ff, {0x2, 0x7f}}, {0xff, 0x5, {0x3, 0x4}}, {0xc3ed, 0x2, {0x1, 0x401}}, {0x8001, 0x1ff, {0x0, 0x401}}, {0x2, 0x3, {0x2, 0xa1ea}}, {0x2, 0x2, {0x3, 0x6}}, {0x7, 0x9, {0x3, 0x1f}}, {0x6666, 0x1, {0x2, 0xe8d}}, {0x9, 0x1, {0x0, 0xb917}}, {0x800, 0x5, {0x1, 0x5}}, {0xffff, 0x6, {0x0, 0xa9}}, {0x9, 0xffff, {0x3, 0x4}}, {0x3f, 0x101, {0x1, 0x7ff}}, {0xfbff, 0x7, {0x1, 0x7}}, {0x8, 0x2, {0x0, 0x3}}, {0x3, 0x6, {0x0, 0x8001}}, {0x8000, 0xffc1, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x1, 0x7f, 0x2, 0x40, 0xb, 'syz1\x00', "da08562b756884f5957425ec36fbda390b0e302d190e3a3ecd1611353c8f15e8", "f8a19f9b0c0b009ae60c1c5bd24da7160b3944a00accde8d310c19d17d4e6d60", [{0x9, 0x8001, {0x1, 0x80000001}}, {0x56ec, 0xfd6}, {0xfff, 0x9, {0x1, 0x1}}, {0xc24, 0x5, {0x3, 0x1ff}}, {0x9, 0x7f, {0x1, 0xbcfc}}, {0x9, 0x6, {0x1, 0x1ff}}, {0x2, 0x7, {0x0, 0x5}}, {0x5, 0x4, {0x0, 0x200}}, {0x7, 0x1000, {0x2, 0x3}}, {0x3, 0x9, {0x0, 0x80000001}}, {0x0, 0x1, {0x3, 0x7f}}, {0x6, 0x8, {0x2, 0x2}}, {0x2, 0x9, {0x1, 0x101}}, {0x40, 0x8, {0x1, 0x7fff}}, {0x7f, 0xfffa, {0x2, 0x2}}, {0x5, 0x8, {0x2, 0x251}}, {0xb8c, 0x800, {0x3, 0x5}}, {0x3, 0x0, {0x1, 0x7fffffff}}, {0x2, 0xbe8e, {0x1, 0x7}}, {0x5, 0x101, {0x3, 0xfffffff9}}, {0x5, 0x66c, {0x0, 0x7}}, {0x400, 0x1000, {0x0, 0x5}}, {0x200, 0x2, {0x0, 0xfffffffc}}, {0x1, 0x6, {0x0, 0x7}}, {0x8, 0x0, {0x3, 0xbbb}}, {0xa3aa, 0x4, {0x2, 0xb0}}, {0xc75, 0x40, {0x2ac230ab9c4e0cf}}, {0xc3a, 0x8b34, {0x0, 0x3}}, {0x0, 0x8000, {0x3, 0x5}}, {0x2, 0xffc0, {0x2, 0x80000000}}, {0x1, 0x0, {0x2, 0x101}}, {0x7, 0x6, {0x0, 0x1}}, {0x2, 0x80, {0x1}}, {0x8000, 0x80, {0x0, 0x236ac158}}, {0x3, 0x5, {0x0, 0x400}}, {0xffff, 0x0, {0x1, 0x2800000}}, {0x0, 0x73b, {0x3, 0x6}}, {0xc0b6, 0x6, {0x3, 0x1}}, {0x40, 0x5, {0x3, 0x8}}, {0x2, 0x8, {0x1}}]}}}, {{0x254, 0x1, {{0x3, 0xab56}, 0x40, 0x5, 0x3ff, 0x0, 0x9, 'syz0\x00', "6424f88d7471be6929e67e325d46e54bc72f61f0cbdbaedd4ee06d4cd1b113a9", "1352eddf5e7df150ffde73a18e21433442e0d82e90db2d61a6ed422fb860e295", [{0x8, 0x81, {0x2, 0x1}}, {0x1, 0x0, {0x1, 0x7b}}, {0x81, 0xfffd, {0x1, 0x2}}, {0xfffc, 0x3ff, {0x1, 0x3}}, {0x3, 0x2, {0x3, 0xffff}}, {0x101, 0x39ae, {0x1, 0x200}}, {0x5, 0x9, {0x3}}, {0x5, 0x9, {0x1, 0x2}}, {0x100, 0xfc7, {0x0, 0x3391}}, {0x5, 0xfff, {0x1, 0x1}}, {0x400, 0x2, {0x1, 0x8000}}, {0x3, 0x7fff, {0x2, 0x7}}, {0x40, 0x6, {0x3, 0x4}}, {0x200, 0x1, {0x2, 0xa67}}, {0x5, 0x8, {0x52868a4a2ac9bacc, 0x7}}, {0x3, 0x0, {0x2, 0x616}}, {0x8, 0x1, {0x2, 0x1f}}, {0x4, 0x2, {0x0, 0xd9e1}}, {0x8, 0xcea7, {0x3, 0x9}}, {0x5a41, 0x7ff, {0x2, 0x200}}, {0xffff, 0x1, {0x1, 0x2}}, {0x9, 0x327a, {0x3, 0x2}}, {0x1, 0x2, {0x2, 0x6}}, {0x0, 0x6, {0x2, 0x9}}, {0x8000, 0x9, {0x3, 0x10000}}, {0x1, 0x5b40, {0x1, 0x1000}}, {0x3ff, 0x5, {0x2, 0x1}}, {0x9, 0x9, {0x0, 0x2}}, {0x2, 0x1f, {0x2, 0x5254}}, {0x5, 0x400, {0x2, 0x3}}, {0x8001, 0x4, {0x0, 0x4465c3b5}}, {0x8, 0x5, {0x0, 0xfffffffb}}, {0x7, 0x401, {0x1, 0x2}}, {0x5, 0x5, {0x2, 0x80000000}}, {0x7f, 0x2, {0x0, 0x9}}, {0x3ff, 0xbe8, {0x2, 0xe7b3}}, {0x4, 0x3, {0x3, 0x4}}, {0x9, 0x1d1, {0x0, 0x8}}, {0xfff, 0x8, {0x0, 0xc0cd}}, {0x849, 0x1f, {0x0, 0x6}}]}}}, {{0x254, 0x1, {{0x2}, 0xe0, 0x8, 0xfff, 0x5, 0x4, 'syz0\x00', "5aff25866a43d9231d36c883fcfc61424d792d156f59ffb30f7891fad9d5d6cc", "a9bb078357d86964d3089f4971e601cb291344e189843ea79ae468f8aa9b7b35", [{0x6, 0x2, {0x2, 0x41}}, {0x8001, 0x6, {0x1, 0x8}}, {0xfffe, 0x200, {0x2, 0xbf}}, {0x0, 0xfffd, {0x3, 0x4f7a}}, {0x5a18, 0x1ff, {0x1, 0x9}}, {0x4, 0x0, {0x1, 0x1}}, {0x8, 0xf33f, {0x2, 0x509c}}, {0x4, 0x5, {0x1, 0x3}}, {0x69, 0xfff9, {0x1, 0x800}}, {0x2, 0x4, {0x3, 0x687d}}, {0x6, 0x4, {0x1, 0x7}}, {0xc64, 0x7fff, {0x3, 0xfffffffc}}, {0xa140, 0x8, {0x1, 0x9511}}, {0x400, 0x3, {0x0, 0x8001}}, {0x8, 0x6, {0x2, 0x3}}, {0x5, 0x4, {0x3, 0x1000}}, {0x8, 0x6, {0x2, 0x1}}, {0x0, 0x6, {0x0, 0x1}}, {0x2a, 0x5, {0x3, 0x3}}, {0x20, 0x401, {0x0, 0x9}}, {0x8fb, 0x80, {0x2, 0x4}}, {0x2, 0x3, {0x3, 0x8001}}, {0x8001, 0xdf, {0x1, 0x80000000}}, {0xf3c0, 0x1ff, {0x0, 0x1000}}, {0x1ff, 0x0, {0x1, 0x40}}, {0x4, 0x8000, {0x2, 0x1}}, {0x8, 0x200, {0x3, 0xffffffff}}, {0x7, 0x1f, {0x0, 0xb6c}}, {0x3, 0x1, {0x0, 0x8}}, {0x9, 0x1, {0x2, 0x2}}, {0x800, 0x9, {0x0, 0x1}}, {0x1ff, 0xd59a, {0x2, 0x3}}, {0xfc01, 0x5, {0x0, 0xfffffffc}}, {0x3f, 0x7, {0x2, 0x6874}}, {0x3ff, 0x9, {0x2, 0x5}}, {0x8, 0x6, {0x2, 0x4ccecfcd}}, {0x6, 0x9, {0x2, 0x80000000}}, {0x3, 0xfff, {0x1, 0x4}}, {0x0, 0x100, {0x2, 0x1}}, {0x1ff, 0x793, {0x2, 0x101}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x4, 0x7f, 0x8d, 0x6, 0x9, 'syz1\x00', "cf897a68809e96d3a1b3f544f4ebc8e3b1f287bc650302f841a868ae323be5f0", "c29eea36804995f596a81b3da108a1f7d6e1d1b550b2bcedc99b6d3fbf7f60ab", [{0x4, 0x3, {0x2, 0x3}}, {0x5, 0x4, {0x1, 0x3}}, {0x0, 0x100, {0x1, 0x4800}}, {0xc1d, 0x401, {0x3, 0xc4}}, {0x1, 0x5, {0x3, 0x5}}, {0x400, 0x3, {0x2, 0xffff}}, {0xff7f, 0x8, {0x1, 0x8}}, {0x1, 0x40, {0x1, 0x5}}, {0x20, 0x3f, {0x2, 0x1}}, {0x1, 0x5, {0x1}}, {0x0, 0x4, {0x0, 0x9}}, {0x2, 0xd22, {0x1, 0x918}}, {0x1, 0x9, {0x0, 0xd87c}}, {0xe6e, 0x0, {0x0, 0x80}}, {0x6, 0xfff8, {0x2, 0x5}}, {0xff, 0x13a, {0x0, 0x53b}}, {0x9, 0x4, {0x2, 0x17c8ba30}}, {0x4, 0x100, {0x1}}, {0x180, 0x7, {0x0, 0x3}}, {0x0, 0xf22, {0x0, 0x7e1}}, {0xa61, 0x40, {0x1, 0x5}}, {0x7, 0x0, {0x2, 0x8e3cdfbd}}, {0x7, 0x0, {0x2, 0x7ff}}, {0x1, 0x7af0, {0xfb23af4afb5a1a52, 0x9f}}, {0x33, 0x1f, {0x3}}, {0x3cd, 0x0, {0x0, 0x8000}}, {0x101, 0xfff9, {0x3, 0x6}}, {0x0, 0x7, {0x0, 0x10000}}, {0xc27d, 0x1, {0x1, 0x8001}}, {0x51f, 0x5, {0x3, 0x92}}, {0x0, 0x9, {0x2, 0xfffffff7}}, {0x20, 0xff80, {0x1, 0x500}}, {0x0, 0x8c, {0x3, 0x5}}, {0x200, 0x4, {0x0, 0x20}}, {0x8, 0x8, {0x1, 0xa2}}, {0x6, 0x1, {0x2, 0x26a}}, {0x2, 0x4, {0x0, 0x5}}, {0x49c, 0x0, {0x1, 0xe22e}}, {0x0, 0xfff, {0x2, 0xb6}}, {0x3, 0xc7dc, {0x2, 0x6a}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4004000}, 0x400c4) 05:26:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x8, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r1, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r3, 0xc1105518, &(0x7f0000000200)={{0x2, 0x3, 0x3, 0x1000, 'syz1\x00', 0x3f}, 0x4, 0x40, 0x8000, r4, 0x2, 0x7fffffff, 'syz0\x00', &(0x7f0000000080)=['^^em0*+)!\x00', '\x00'], 0xb, [], [0x1f, 0x8, 0xfff, 0x200]}) 05:26:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000034000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 496.663431][T28621] binder: BINDER_SET_CONTEXT_MGR already set [ 496.686767][T28621] binder: 28620:28621 ioctl 40046207 0 returned -16 05:26:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000408000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VT_GETMODE(r5, 0x5601, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e24, @multicast1}}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 496.719898][T28621] binder: 28620:28621 ioctl c1105518 20000200 returned -22 05:26:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000130fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 496.778712][T28626] binder: BINDER_SET_CONTEXT_MGR already set [ 496.784770][T28626] binder: 28620:28626 ioctl 40046207 0 returned -16 [ 496.803676][T28629] binder: 28620:28629 ioctl c1105518 20000200 returned -22 05:26:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000060000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 496.823459][T28633] binder: BINDER_SET_CONTEXT_MGR already set 05:26:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00fffff000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000a08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 496.857836][T28633] binder: 28630:28633 ioctl 40046207 0 returned -16 [ 496.884826][T28634] binder_alloc: 28630: binder_alloc_buf, no vma 05:26:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mice(0xffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x80800) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1cf8ffff07060101feffffff00000000000000f60500010007000000"], 0x1}, 0x1, 0x0, 0x0, 0x400c840}, 0x40001) [ 496.918644][T28633] binder: 28630:28633 ioctl 891c 20000000 returned -22 [ 496.977811][T28634] binder: BINDER_SET_CONTEXT_MGR already set [ 496.984200][T28634] binder: 28630:28634 ioctl 40046207 0 returned -16 [ 496.992008][T28641] binder: 28630:28641 ioctl 891c 20000000 returned -22 05:26:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000230fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000e08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000001000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f0000000000)={0x2, 0x5000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="9f95a62900000000d2caf1a3b63451a608003ca22665f3f4000000"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x1d, 0x3, 0x126, &(0x7f0000000300)="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"}) [ 497.153461][T28657] binder_alloc: 28656: binder_alloc_buf, no vma [ 497.162475][T28657] binder: 28656:28657 ioctl 4010aeab 20000000 returned -22 [ 497.175355][T28657] binder: BINDER_SET_CONTEXT_MGR already set [ 497.182725][T28657] binder: 28656:28657 ioctl 40046207 0 returned -16 05:26:23 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000ffffff9e000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000002000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 497.213206][T28657] binder: 28656:28657 unknown command 698783135 05:26:23 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xaecb}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={r7, 0xb0, &(0x7f0000000100)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e24, 0x100, @mcast1, 0x80000000}, @in6={0xa, 0x4e20, 0x6699, @loopback, 0x7}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @in6={0xa, 0x4e21, 0xffff, @rand_addr="149b2128debf03a287b500a617f1ac9f", 0xfff}]}, &(0x7f0000000240)=0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:23 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000330fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000001408000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 497.262950][T28657] binder: 28656:28657 ioctl c0306201 20000200 returned -22 [ 497.265129][T28660] binder: BINDER_SET_CONTEXT_MGR already set [ 497.335577][T28660] binder: 28656:28660 ioctl 40046207 0 returned -16 [ 497.343295][T28657] binder: 28656:28657 ioctl 4b72 20000140 returned -22 [ 497.369076][T28657] binder: BINDER_SET_CONTEXT_MGR already set [ 497.369218][T28670] binder_alloc: 28666: binder_alloc_buf, no vma [ 497.379568][T28657] binder: 28656:28657 ioctl 40046207 0 returned -16 [ 497.387853][T28662] binder: 28656:28662 ioctl 4010aeab 20000000 returned -22 [ 497.422326][T28674] binder: BINDER_SET_CONTEXT_MGR already set 05:26:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000003000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000006008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000fffffff0000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 497.448179][T28674] binder: 28666:28674 ioctl 40046207 0 returned -16 [ 497.459686][T28670] binder: BINDER_SET_CONTEXT_MGR already set [ 497.486374][T28670] binder: 28666:28670 ioctl 40046207 0 returned -16 05:26:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x5, 0xd2100) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x2dc, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x3c}, 0xee}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x79d415a2}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f4000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4610}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @remote, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff9ad7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3291}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r6 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000240)=0x101, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000100)={0x2, 0x1, @start={0x1ff}}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) openat$ttynull(0xffffff9c, &(0x7f00000006c0)='/dev/ttynull\x00', 0x40000, 0x0) 05:26:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000430fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 497.559639][T28674] binder: BINDER_SET_CONTEXT_MGR already set [ 497.582862][T28674] binder: 28666:28674 ioctl 40046207 0 returned -16 05:26:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000004000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:24 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000024000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 497.621292][T28687] binder_alloc: 28685: binder_alloc_buf, no vma [ 497.651963][T28687] binder: 28685:28687 ioctl c0485660 20000100 returned -22 [ 497.729737][T28690] binder_alloc: 28685: binder_alloc_buf, no vma [ 497.750366][T28697] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 497.759358][T28687] binder: 28685:28687 unknown command 3328 [ 497.759858][T28690] binder: 28685:28690 ioctl c0485660 20000100 returned -22 [ 497.765218][T28687] binder: 28685:28687 ioctl c0306201 20000100 returned -22 05:26:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000530fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000007fffffff000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 497.769103][T28697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000005000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000038000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) 05:26:24 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x3001}) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x2, &(0x7f0000000100)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, 0x0}]) io_submit(r2, 0x0, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0xfffffffe}, @enter_looper], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000000)={0x2, 0x1, 0xfffffffa, 0x7, '\x00', 0x3f}) [ 497.981063][T28708] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 497.989947][T28713] binder_alloc: 28711: binder_alloc_buf, no vma [ 497.999043][T28713] binder: 28711:28713 ioctl b701 0 returned -22 05:26:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000630fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000048000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 498.031942][T28714] binder_alloc: 28711: binder_alloc_buf, no vma [ 498.057033][T28714] binder: 28711:28714 ioctl b701 0 returned -22 [ 498.063934][T28712] binder_alloc: 28706: binder_alloc_buf, no vma 05:26:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000006000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 498.110176][T28712] binder: 28706:28712 ioctl c0405519 20000000 returned -22 05:26:24 executing program 3: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000f0ffffffffffff000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 498.178356][T28730] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000730fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000007000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000003000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000008000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 498.419922][T28747] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000008060101000000000000000000000000050001002300000099a94f4c44a0fc5ba698c3baea41bcf4d839b4fdc7f6e01a8660820892e4fd2c998967d48b3f234b40d9ffc4181de592b6ac77960cc3ce46f46bc5b4365aa658a00cff2fc1cbfea3b9457f4cfdc631b836882e24884f7f6341aef239a71370e94a8db48f6ea70cd375318df4753a84b8349c066dfb63dd51c9731ec80645d73ba02670a5919504a2"], 0x1c}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01ca797a7789863c"], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockname$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000140)=0x1c) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 05:26:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000002000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000830fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000010000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000009000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 498.756953][T28761] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 05:26:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000a000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 498.798505][T28761] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000930fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000003000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000024000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f0000000000)=0x10000) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000001a591955f6b886973850b9770fcb0bd7619dd7b3f985d7629e95a53935"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000240), 0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000b000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 499.013528][T28775] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 499.051666][T28775] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.065181][T28777] binder_alloc: 28774: binder_alloc_buf, no vma [ 499.090508][T28777] binder: 28774:28777 ioctl 806c4120 20000140 returned -22 05:26:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a30fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 499.120868][T28777] binder: 28774:28777 ioctl 80044948 20000000 returned -22 05:26:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000038000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 499.162259][T28777] binder: 28774:28777 unknown command 0 [ 499.190102][T28777] binder: 28774:28777 ioctl c0306201 20000200 returned -22 [ 499.256086][T28788] binder: 28774:28788 ioctl 806c4120 20000140 returned -22 [ 499.281331][T28784] binder: 28774:28784 ioctl 80044948 20000000 returned -22 05:26:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000004000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 499.311623][T28791] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 05:26:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01c364e8c9870577014840"], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_bond\x00', {0x3}, 0xaa7}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:25 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b30fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000e000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000048000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 499.527098][T28799] binder_alloc: 28795: binder_alloc_buf, no vma 05:26:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c30fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000014000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 499.567741][T28799] binder: 28795:28799 ioctl 8982 20000000 returned -22 [ 499.576420][T28806] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000a000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 499.644807][T28807] binder: 28795:28807 unknown command -396049663 05:26:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008020540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 499.690416][T28799] binder: 28795:28799 ioctl 8982 20000000 returned -22 [ 499.702242][T28807] binder: 28795:28807 ioctl c0306201 20000100 returned -22 05:26:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d30fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000019000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 499.806137][T28816] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008030540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x1060, 0x0, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [{{0x254, 0x1, {{0x3, 0x800}, 0x6, 0x8, 0x5, 0xfffb, 0x24, 'syz1\x00', "b84b05793329a7d8e61b5080694f54f75465fe6482803f2d13ea4a9344c61c57", "c350320039a496b2e840699371a6f7f4d13dfc3d04bfac051b4aec3b552f76ad", [{0x2, 0x3ff, {0x0, 0x800}}, {0x90, 0x8, {0x2, 0xbf}}, {0x1ff, 0x8, {0x3, 0x29ec}}, {0x7539, 0x800, {0x1, 0xb80}}, {0x2, 0x3, {0x1, 0xfff}}, {0x101, 0x6, {0x1, 0xfffffffe}}, {0x2, 0x2, {0x0, 0xb}}, {0x400, 0x9, {0x3, 0x7ff}}, {0x800, 0xa922, {0x0, 0x8}}, {0x3, 0xfffd, {0x1, 0x8}}, {0x9, 0x0, {0x0, 0x4}}, {0x3, 0xc63f, {0x2, 0x1000}}, {0x5, 0x2, {0x2, 0x401}}, {0x9, 0x8, {0x0, 0x2}}, {0x4, 0x5d53, {0x0, 0xd11}}, {0x7, 0x7, {0x3, 0x2}}, {0x69, 0x3ff, {0x0, 0x7fff}}, {0x2, 0x3, {0x2, 0x36}}, {0x3ff, 0x7, {0x1, 0x3a8d}}, {0x7, 0xa5, {0x0, 0x8}}, {0x4000, 0x3f, {0x3, 0x7}}, {0xcd, 0x4, {0x2, 0xb07}}, {0xfb9f, 0xc2, {0x3, 0xfff}}, {0x7f, 0x400, {0x1, 0x4}}, {0x4, 0x7f, {0x2, 0x7}}, {0x78c, 0x7, {0x2, 0x3}}, {0x3, 0x2, {0x2, 0x7}}, {0xffff, 0x4, {0x3, 0xffffffff}}, {0x1, 0x0, {0x3, 0x400}}, {0x6, 0x8, {0x1, 0x7fff}}, {0x8, 0xb6, {0x3, 0x7}}, {0x2, 0x3, {0x1, 0x5}}, {0x7, 0x9, {0x2, 0x100}}, {0x10, 0x7, {0x2, 0x1f}}, {0x8, 0x0, {0x1, 0x20}}, {0x800, 0x9, {0x1, 0x3}}, {0xfffb, 0x4, {0x0, 0x5}}, {0x3, 0x7, {0x3, 0x9}}, {0xfffb, 0x1, {0x2, 0x109c}}, {0x0, 0x8, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0xf7, 0x80, 0x6, 0x3f, 0x7, 'syz1\x00', "04caae0d36fabbd49f6a9ae94587ab2f0fa7e1aa0afa29a279acbcceb2a2e705", "00af1fd745f90975ead8c623f32dcb1348816aea23ae5dd1ee8bb74096826bb6", [{0xffee, 0x200, {0x0, 0x6}}, {0x2, 0x1f, {0x3, 0x3ff}}, {0x401, 0x5970, {0x2, 0x100}}, {0x100, 0x6, {0x1, 0xfffffffc}}, {0xfff8, 0x4, {0x3, 0x6}}, {0x8, 0x5}, {0xcd2, 0xffff, {0x2, 0x81}}, {0x4, 0x9b, {0x1, 0x20}}, {0xff80, 0x8, {0x3, 0xff}}, {0x6, 0x6, {0x0, 0x100}}, {0xc5, 0xffc1, {0x0, 0xd262}}, {0x7, 0x68, {0x2, 0x90}}, {0x6, 0x1f, {0x1, 0x3ff}}, {0x7, 0x9, {0x2, 0x1}}, {0x3, 0x81, {0x2, 0x8ff2}}, {0x80, 0x8000, {0x2, 0xff}}, {0x0, 0x200, {0x2, 0x8b29}}, {0xf800, 0x4, {0x0, 0x9}}, {0x1000, 0x3, {0x3, 0x5}}, {0x7, 0x5, {0x3, 0x9}}, {0x3, 0x3f, {0x0, 0x1ff}}, {0x3f, 0x7, {0x3, 0xfff}}, {0x3, 0xd844, {0x2, 0x8}}, {0x5, 0x2, {0x2, 0x1}}, {0x0, 0xfffb, {0x1, 0xd6e}}, {0x18d, 0x6, {0x3, 0x7}}, {0x0, 0x6, {0x2, 0x100010}}, {0x101, 0xfd2f, {0x3, 0x1}}, {0x2, 0x400, {0x1, 0xffffffff}}, {0x9, 0x3f, {0x3, 0x5d55c29c}}, {0x7, 0x6, {0x0, 0x81}}, {0x4, 0x4, {0x0, 0x7}}, {0x0, 0x81, {0x1, 0x8}}, {0x800, 0x8000, {0x1, 0x36a1}}, {0x100, 0x1, {0x2, 0x401}}, {0x8000, 0xb, {0x1, 0x62}}, {0x8026, 0x80, {0x2, 0x7}}, {0xff, 0x1, {0x2, 0x8}}, {0x8, 0x101}, {0x2, 0x1ff, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0xd17e}, 0x3, 0x55, 0x1, 0x3, 0x22, 'syz1\x00', "bc4396cda8d78846ad50dce9a5126cf34f9a142af2cd4c518a3c1ee70797d660", "c74b04dd9b7d3de4ea93acb29e70f359e79e979fd4f2ae31ae6a66626c1ed82f", [{0x4, 0x9, {0x3, 0x8000}}, {0xc000, 0x3ff, {0x1, 0xc0}}, {0x7fff, 0x81, {0x2, 0x5}}, {0x800, 0x9, {0x0, 0x10001}}, {0x6, 0x1, {0x1, 0x7fffffff}}, {0x0, 0x6, {0x0, 0x81}}, {0x3f, 0x4339, {0x0, 0x62}}, {0xff0, 0x4, {0x3, 0x678d}}, {0x0, 0x7930, {0x1, 0x5ac9f690}}, {0x9, 0x200, {0x2, 0x5}}, {0x1, 0x7, {0x0, 0x3ff}}, {0x0, 0x400, {0x1, 0x8000000}}, {0x400, 0xe44, {0x2, 0x8}}, {0x4, 0x38, {0x0, 0x841}}, {0x6, 0xe1d1, {0x3, 0x2}}, {0x4, 0x3ff, {0x3, 0xfffffffa}}, {0x1, 0x0, {0x3, 0x8}}, {0x5, 0x101, {0x0, 0xfffffffb}}, {0xf71d, 0x5, {0x1}}, {0x6, 0x1, {0x526cc3186f519304}}, {0x7ff, 0x3, {0x3, 0x7}}, {0x0, 0xfffc, {0x3, 0x4}}, {0x7, 0x7, {0x0, 0xfff}}, {0x6, 0x7, {0x3, 0x81}}, {0x4, 0x5, {0x29ab162cbba35f07, 0x3}}, {0x1000, 0xc, {0x3, 0x6}}, {0x9, 0x2, {0x0, 0xffffffff}}, {0xfff, 0x2, {0x3, 0x2}}, {0x8, 0x0, {0x3, 0x1000}}, {0x9136, 0x6, {0x2}}, {0xfff, 0x3, {0xd9ebe633cabecc7, 0x4}}, {0x4, 0x6, {0x2, 0x2}}, {0x0, 0x0, {0x1, 0x20}}, {0x4, 0xf0, {0x1, 0x400}}, {0x1, 0x2, {0x0, 0x80000000}}, {0x5, 0x0, {0x2, 0x7}}, {0x100, 0x9, {0x0, 0x45db}}, {0x3a8, 0x0, {0x0, 0x4040}}, {0x8001, 0x6, {0x0, 0xfffffffd}}, {0x3, 0x101, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{}, 0x1, 0x80, 0x3, 0xcf6c, 0x10, 'syz0\x00', "9e98d7fd4aafead6a962203e55ffca85159a4c0209d4dead19a936acab77bc29", "1f03bf087c0f4089187dd3e667013749521874c69e570b4089fa4df08a37c10d", [{0xff, 0x6, {0x3, 0x5}}, {0x9, 0xfffd, {0x1, 0x7}}, {0x5, 0x1, {0x78ee1bbb972a11ed, 0x6}}, {0x3, 0x3, {0x0, 0xffff}}, {0x9, 0x4, {0x2, 0x400}}, {0x400, 0x20, {0x3, 0x5}}, {0x0, 0x6fda, {0x3, 0x3}}, {0x5, 0x9, {0x2}}, {0x7, 0xfff}, {0x0, 0x1ff, {0x2, 0xffffffff}}, {0xff, 0x27, {0x1, 0x3}}, {0xff, 0x101, {0x3, 0x10001}}, {0x7, 0x1, {0x2, 0x7f}}, {0x8, 0x10, {0x1, 0x10000}}, {0x3, 0x41, {0x1, 0x20}}, {0x2, 0x9, {0x0, 0x1ff}}, {0x4, 0x8001, {0x2, 0x3}}, {0x0, 0x0, {0x1, 0xffff}}, {0x100, 0x0, {0x0, 0x81ab}}, {0x3, 0x8f, {0x1, 0x1}}, {0xff15, 0x6, {0x2, 0x3}}, {0x1f, 0x7, {0x0, 0x1}}, {0x9, 0xfff, {0x2}}, {0x6, 0x1, {0x2, 0x8}}, {0xfff, 0x2557, {0x3, 0x7ff}}, {0x4, 0x3ff, {0x2, 0x80000000}}, {0x0, 0xfc00, {0x3, 0xac}}, {0x1, 0x2, {0x2, 0x100}}, {0x3, 0x5, {0x0, 0x20}}, {0x77, 0x2, {0x3, 0x25b}}, {0x7fff, 0x1, {0x3, 0x2}}, {0xff81, 0x4, {0x0, 0x5}}, {0x401, 0xa7ba, {0x3, 0x7257}}, {0x4, 0x3f, {0x3, 0x8001}}, {0x800, 0xaa, {0x3, 0x8}}, {0x8, 0x7, {0x0, 0xf8}}, {0x7b7, 0x490, {0x0, 0x3}}, {0x8, 0xff, {0x3, 0x6}}, {0x9, 0x80, {0x2, 0x4}}, {0x7, 0x2650, {0x0, 0x1ff}}]}}}, {{0x254, 0x1, {{0x0, 0x10001}, 0x81, 0xe6, 0x1ff, 0x6, 0x22, 'syz0\x00', "c0fa1c689c3d972e9b0e26209eb8d0ed4f9dc25a92ee67681c29edbc1f0188cc", "6d9c353edb0861175c21a9521ec2a5872739bed86dfc4bec0e63f24146c26504", [{0xfff, 0x5}, {0x8, 0x400, {0x1, 0x80000001}}, {0x8, 0x7, {0x1, 0x3}}, {0x3f, 0x6, {0x0, 0x1}}, {0x7, 0x6, {0x2, 0x81}}, {0x6, 0x9, {0x0, 0xfffffff9}}, {0x0, 0xfff, {0x0, 0x9}}, {0x1c6, 0x80, {0x3, 0x4}}, {0x1, 0x9d, {0x1, 0xab9}}, {0x400, 0x3f, {0x1, 0x7}}, {0xfffe, 0x5, {0x2, 0x2}}, {0xfff, 0x81, {0x0, 0x7}}, {0x7, 0x8, {0x0, 0x8}}, {0x9, 0x4, {0x3, 0x3a0}}, {0x4, 0xfff7, {0x2, 0x66a2}}, {0x7, 0x7f, {0x3, 0x7}}, {0x8a4, 0x9, {0x1, 0x6b8}}, {0x5, 0x81, {0x3, 0x4}}, {0xdc5, 0x800, {0x1}}, {0x6, 0x5, {0x0, 0xdd9}}, {0x3ff, 0x3f, {0x2, 0x4e}}, {0x8, 0xc6, {0x2, 0x40}}, {0x8, 0x0, {0x0, 0x22}}, {0x8d6, 0x7, {0x0, 0x7fff}}, {0xf001, 0x2e00, {0x1, 0x1f}}, {0x0, 0x3, {0x1, 0x6}}, {0x478, 0x65a, {0x0, 0x76}}, {0xfff, 0x3f, {0x0, 0x2adb}}, {0x200, 0x3, {0x2, 0x8}}, {0xc3ba, 0x7, {0x1, 0x2}}, {0x2, 0x27a4, {0x2, 0x4}}, {0x101, 0x5, {0x2, 0x5}}, {0x1, 0x9, {0x0, 0x7f}}, {0x7ff, 0x80, {0x2, 0x800}}, {0x101, 0x5, {0x2, 0x3ff}}, {0xd39, 0x1, {0x3, 0x1}}, {0xe90, 0x7, {0x0, 0x101}}, {0x1, 0x2, {0x0, 0x7}}, {0x6, 0x3, {0x0, 0x2}}, {0xfffa, 0x5, {0x2, 0xffff}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x1, 0x81, 0x0, 0x2, 0x1e, 'syz0\x00', "83693fb372c0d1d807c367a1dd6550bacef5e15c2bc5c78137d81752d274c102", "88a8a8a8022523073aa59dc4ef59a16749af5b820f03a4bc7c3cece641729d94", [{0x1000, 0xa5, {0x3, 0xfffffffb}}, {0x0, 0x8, {0x1, 0x227}}, {0x401, 0x40, {0x1, 0x80000000}}, {0x200, 0x5, {0x2}}, {0x4, 0x5, {0x3, 0xa0}}, {0x9, 0x8000, {0x1, 0x7fffffff}}, {0xb8, 0x81, {0x2, 0xffffff81}}, {0x1, 0x1ff, {0x1, 0x2}}, {0xff, 0x3ff, {0x1, 0x6}}, {0x100, 0x1000, {0x1, 0x3ff}}, {0xdba5, 0x4, {0x1, 0xffffff7f}}, {0x9b7, 0x81, {0x3, 0xcef}}, {0x8001, 0x7, {0x2, 0x4}}, {0x4, 0x1ff, {0x1, 0x8}}, {0x8, 0xffff, {0x2, 0x1}}, {0x3, 0x0, {0x1, 0x7}}, {0xff, 0x2, {0x1, 0x800}}, {0xd2d, 0x9, {0x0, 0xffffffff}}, {0x200, 0x8001, {0x2, 0x9}}, {0x9, 0x0, {0x3, 0x1}}, {0xece3, 0x3, {0x0, 0x3}}, {0x9, 0x5, {0x1, 0x5a0}}, {0x0, 0x1, {0x1, 0x401}}, {0x8, 0x0, {0x1, 0x8}}, {0x8, 0x4, {0x1, 0x3}}, {0x6aa, 0x5, {0x1, 0x3}}, {0x800, 0x4, {0x0, 0x9}}, {0x23c9, 0xeded, {0x3, 0x7}}, {0x9, 0x9, {0x0, 0x8001}}, {0x800, 0x9, {0x1, 0x25f}}, {0x7, 0x7e4, {0x3, 0x1}}, {0x1, 0x1, {0x1, 0x1}}, {0xffff, 0x401, {0x2, 0x6}}, {0x7, 0xffff, {0x1, 0x8}}, {0x80, 0x800}, {0x6, 0x9, {0x0, 0x9}}, {0x2, 0x7f, {0x1, 0x7}}, {0xfe00, 0x2, {0x2}}, {0x7e0, 0x4, {0x3, 0x81}}, {0x4, 0xec3, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x0, 0x8, 0x80, 0x9, 0x13, 'syz0\x00', "9a25c5f7968ebe38bf3ec61750cf003b3fe936f05474bbfd2a8361e2c34a164a", "fc4659292770b2797dcb94418fef41e1d4f7f80b13ca95b0e544123147350b63", [{0x2, 0x50c, {0x0, 0x4}}, {0x5, 0x8, {0x1, 0x1}}, {0x3e9a, 0x7fff, {0x3, 0xfffff3ef}}, {0x2, 0x3347, {0x1, 0xb5c}}, {0x7fff, 0x4, {0x3, 0x74f8}}, {0x7f, 0x14, {0x3, 0x5f45}}, {0x8d2, 0x1f, {0x3, 0x7fff}}, {0x1, 0x9, {0x0, 0x68c6}}, {0x4, 0x401, {0x3}}, {0x7, 0x6, {0x1, 0x9}}, {0x4, 0x83dc, {0x1, 0x58000000}}, {0x74bd, 0xad, {0x0, 0xec5f}}, {0x800, 0x0, {0x0, 0x2}}, {0x3, 0xfff7, {0x0, 0x81}}, {0x4, 0x9, {0x1, 0x5}}, {0x4, 0xffff, {0x2, 0x10000}}, {0x1000, 0x7f, {0x3, 0x6}}, {0x4, 0x101, {0x3, 0xffffffff}}, {0x5, 0x101, {0x3, 0xffffffff}}, {0x7fff, 0xfff7, {0x1, 0x5}}, {0xac9, 0x8, {0x1, 0x401}}, {0x3, 0xf93c, {0x3, 0x4}}, {0x2c1, 0x0, {0x0, 0x2}}, {0x9, 0x1, {0x1, 0x6}}, {0xe, 0xd6, {0x1, 0x1}}, {0x7f, 0x4, {0x3, 0x800}}, {0x4, 0x5, {0x0, 0x20000000}}, {0x3, 0x100, {0x2, 0xe64}}, {0xeb2, 0xfffd, {0x0, 0xfffffff7}}, {0x2, 0xe7, {0xfe6805ca067718cc, 0x3}}, {0xc8, 0x5, {0x1, 0x7ff}}, {0xb62d, 0x119, {0x0, 0x7}}, {0x7, 0x7ff, {0x1, 0x666a39e1}}, {0x0, 0xad3d, {0x0, 0x3f}}, {0xc9d, 0x40, {0x1, 0x1000}}, {0x1ff, 0x6, {0x1, 0x5b}}, {0x3ff, 0x4, {0x0, 0x8}}, {0x9, 0x7f5d, {0x3, 0x5}}, {0x0, 0x5, {0x0, 0x31ea}}, {0x9, 0x8, {0x3, 0x7}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x80}, 0xc090) 05:26:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000e000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 499.992457][T28827] binder_alloc: 28825: binder_alloc_buf, no vma [ 500.009234][T28828] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 500.052389][T28827] binder: 28825:28827 ioctl c0306201 20000100 returned -14 05:26:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e30fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000008060101000000000000000000000000050001000700e1ff"], 0x1c}}, 0x0) 05:26:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000060000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008040540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000014000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:26 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/238, 0xee) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40086439, &(0x7f0000000000)={0x7f}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000866000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:26 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f30fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 500.330725][T28844] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080a0540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 500.440319][T28849] binder: 28846:28849 ioctl 40086439 20000000 returned -22 05:26:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000006c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 500.494759][T28849] binder: BINDER_SET_CONTEXT_MGR already set [ 500.532807][T28849] binder: 28846:28849 ioctl 40046207 0 returned -16 05:26:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000060000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 500.558561][T28859] binder: 28846:28859 ioctl 40086439 20000000 returned -22 05:26:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001030fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000000)={0x9a}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080e0540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00ffffff9e000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000031fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000f0000000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008140540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 500.852722][T28872] binder: 28868:28872 ioctl ae71 20000000 returned -22 05:26:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e21, @rand_addr=0x3f}}) [ 500.904869][T28872] binder: 28868:28872 ioctl ae71 20000000 returned -22 05:26:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00fffffff0000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008600540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 501.055668][T28886] binder: 28883:28886 ioctl 891b 20000000 returned -22 05:26:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00fffffff5000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000131fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 501.113362][T28891] binder: 28883:28891 ioctl 891b 20000000 returned -22 05:26:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000030000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007000000bc73e6f578194c8346b00f1d928d9f6954ea88b1c253c7f742556d6ca9bd0bcaf55cc5eb3bfff48691b360e825afe3f02271e95c9077f1ad444fa80bd1c8425bec5a85b1356a80bf8eb9"], 0x1}, 0x1, 0x0, 0x0, 0x20d0}, 0x0) 05:26:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000f0ffff000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000640000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:27 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000231fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05404001000000000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0185648, &(0x7f0000000100)={0x9a0000, 0x2, 0x8000, r4, 0x0, &(0x7f0000000080)={0x0, 0xffffffff, [], @string=&(0x7f0000000000)=0x6b}}) write$vhci(r5, &(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, "73f4823435e66983b722b67193f5b71ae37adbb96b3c64479e30e564cd9850407bad1f65ecf1afa3209a3d3e1c66616200322448ea7ae92d7e5bde696432d4c2e4b122fb3692bb54249a594761029c0dd535e10d1d5ca3bd7c0b2a4455f7d1bc86b159e07217be3f6cfbbfd6ea1ddd9ae91a37e9d3718b656f32ca9841f1434d"}, 0x81) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="31000400080601010000000000000000000000000500010007000000"], 0x1c}}, 0x0) 05:26:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000a0000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 501.449089][T28911] binder: 28910:28911 unknown command 20987909 [ 501.470013][T28911] binder: 28910:28911 ioctl c0306201 20000280 returned -22 [ 501.488021][T28911] binder: 28910:28911 ioctl c0185648 20000100 returned -22 05:26:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000940000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c007fffffff000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 501.509554][T28911] binder: BINDER_SET_CONTEXT_MGR already set [ 501.518043][T28915] binder: 28910:28915 ioctl c0306201 20000280 returned -14 [ 501.529353][T28911] binder: 28910:28911 ioctl 40046207 0 returned -16 [ 501.576906][T28917] binder: 28910:28917 ioctl c0306201 20000100 returned -14 [ 501.587650][T28911] binder: 28910:28911 ioctl c0185648 20000100 returned -22 05:26:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000331fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) fchdir(r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12) 05:26:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c009effffff000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000a40000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000e0000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000431fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:28 executing program 2: r0 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) splice(r0, &(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x800000a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f00000000c0)={0x4, 0x101, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090a, 0xfffff17e, [], @p_u32=&(0x7f0000000040)=0x4}}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r6, 0x0) splice(r6, &(0x7f0000000100), r5, 0x0, 0x800000a, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0185649, &(0x7f0000000240)={0x9a0000, 0xfffffbff, 0x280, r5, 0x0, &(0x7f0000000200)={0x9b0908, 0x9, [], @string=&(0x7f0000000180)=0xbc}}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000280)={0x1, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x68, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}}, 0x0) 05:26:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000b40000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00f0ffffff000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 502.006277][T28946] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 05:26:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000140000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00f5ffffff000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt(r5, 0x1, 0xfffffff8, &(0x7f0000000300)=""/145, &(0x7f0000000140)=0x91) lookup_dcookie(0xffffffff, &(0x7f00000003c0)=""/104, 0x68) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)={0x0, 0x9, 0x800, &(0x7f0000000000)=0x5}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000531fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001140000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000340000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 502.240592][T28960] binder: BINDER_SET_CONTEXT_MGR already set [ 502.262046][T28960] binder: 28956:28960 ioctl 40046207 0 returned -16 05:26:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001240000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:28 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000631fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 502.314576][T28962] binder: 28956:28962 unknown command 0 [ 502.336448][T28962] binder: 28956:28962 ioctl c0306201 20000200 returned -22 05:26:28 executing program 2: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) ptrace$poke(0x4, r3, &(0x7f0000000200), 0x20) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r0, 0x0, 0x800000a, 0x0) fstatfs(r4, &(0x7f0000000100)=""/168) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007000000"], 0x1c}}, 0x0) 05:26:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000600000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00fffffffffffff0000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000080601014000000000000000000000000500010007000080e62bec2511859f2d98903b8b13188b4b7c3737330e35632698867ba737dabc8c24a140e7d1741daf1d786fb749a34084c3643cf0708d2a21ada7f8533ed4f32a17e0e3d9b45814c49265f79ac6fca5e3b961f8c5ce4c5c"], 0x1c}}, 0x0) 05:26:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001340000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000010a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000731fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000f00000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:29 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001440000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000020a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 502.851249][T28997] binder_alloc_new_buf_locked: 8 callbacks suppressed [ 502.851258][T28997] binder_alloc: 28995: binder_alloc_buf, no vma 05:26:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000640000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 502.912550][T29004] binder: 28995:29004 ioctl 227e 20000000 returned -22 05:26:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000030a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000831fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000400300000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 502.964535][T28997] binder_alloc: 28995: binder_alloc_buf, no vma [ 502.973718][T29004] binder: 28995:29004 ioctl 227e 20000000 returned -22 05:26:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000840000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80044121, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x800, 0x11c00) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000040a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000931fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:29 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000034000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 503.253352][T29021] binder_alloc: 29019: binder_alloc_buf, no vma [ 503.293646][T29021] binder: 29019:29021 ioctl 80044121 20000080 returned -22 05:26:29 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000940000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 503.359472][T29028] binder: BINDER_SET_CONTEXT_MGR already set [ 503.383018][T29028] binder: 29019:29028 ioctl 40046207 0 returned -16 05:26:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000050a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 503.407564][T29021] binder: 29019:29021 ioctl 80044121 20000080 returned -22 05:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a31fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000140), r1, 0x0, 0x800000a, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 05:26:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000060a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000a40000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000fffff000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000070a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair(0x21, 0x3, 0x1, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000e40)={0x12c, 0x1, 0x1, 0x600, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x5}]}}, @CTA_LABELS={0x20, 0x16, 0x1, 0x0, [0x784, 0x6, 0x7, 0x4, 0x101, 0xffffffc0, 0x2]}, @CTA_TUPLE_REPLY={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, [], 0x1e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1406}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4044001}, 0x840) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r1) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000600)) 05:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b31fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000b40000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000080a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 503.915950][T29063] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 503.918178][T29062] binder_alloc: 29060: binder_alloc_buf, no vma [ 503.974362][T29062] binder: 29060:29062 ioctl 8818564c 20000600 returned -22 05:26:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000001000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c31fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001040000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 504.018104][T29068] binder: 29060:29068 ioctl 8818564c 20000600 returned -22 05:26:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000090a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 504.152181][T29074] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 05:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d31fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000000000a0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:30 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000002000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001140000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000000000b0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:30 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e31fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001240000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000000000c0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "42f8ad0d66804887", "f82dfdfee1e8163cad99866ec89388a683f6b2dfca69e1bdba0d2728c725bac1", "cb5758e1", "49dbfe91ca154551"}, 0x38) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ff0f0048"], 0x1, 0x0, &(0x7f00000002c0)='s'}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x164, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x100001f}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x3, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x0, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0xfffffffffffffffa, 0x2, 0x8001}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x63c4}]}, @TIPC_NLA_MON={0x0, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x0, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4008054}, 0x20004441) 05:26:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f31fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000003000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000000000e0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 504.678101][T29102] binder_alloc: 29101: binder_alloc_buf, no vma [ 504.712016][T29108] binder_alloc: 29101: binder_alloc_buf, no vma [ 504.719193][T29102] binder: 29101:29102 unknown command 1207963647 05:26:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001340000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 504.725993][T29102] binder: 29101:29102 ioctl c0306201 20000100 returned -22 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000140a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000240)=""/23, &(0x7f0000000300)=0x17) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000080601017c022ba62bc998fbca6bffe625000000000000f2d8025793ab7c3c010007000000aedf71"], 0x1c}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) mlockall(0x1) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000200)) 05:26:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008001440000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001031fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000004000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000190a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 504.961303][T29122] __nla_validate_parse: 4 callbacks suppressed [ 504.961312][T29122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540020000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 505.033481][T29125] binder_alloc: 29118: binder_alloc_buf, no vma 05:26:31 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x28000) 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000000004c0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000032fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000a000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540030000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:31 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000600a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000008660a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = openat$null(0xffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x163400, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r3 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x170, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff9b}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5c1}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x44010}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540040000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:31 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000132fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000e000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000000006c0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000232fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080005400a0000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r6, 0x0) splice(r6, &(0x7f0000000100), r5, 0x0, 0x800000a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYBLOB="7062acf26dec360043f1bc2ad7d8ba45b55b45fd710e898cac1fbde341572ea242f3a28a350aa48ba4999b9e999469bbcb7ffcda869e54f0854c92569744e04cb32575cd39e0bd1708af919e7b238c00b1090fdd76154223", @ANYRES64=r6]], 0x0, 0x0, 0x0}) r7 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xac, 0xa, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_USERDATA={0x79, 0xd, 0x1, 0x0, "2d22801faffd3b312c156e8c873d0cafe83594ab2f940cd5a18d722970195454b6004afc502b79a5d24b23b529930dbad49a23d95af49dc94c0f04b234b7a6a512b525445f3f93b5a363008ff83fe6d7ad46486fdd73d724e7583f400e774cb36050eb9d4ea3a3ab15ccea274e0685bc5b07971d5b"}, @NFTA_SET_POLICY={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x44050}, 0x1) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000ffffff9e0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000014000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080005400e0000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000332fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 505.805363][T29173] binder: 29171:29173 ioctl c0306201 20000200 returned -14 [ 505.828519][T29173] binder: 29171:29173 ioctl c0306201 20000280 returned -14 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000fffffff00a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 505.886333][T29176] binder: 29171:29176 ioctl c0306201 20000100 returned -14 [ 505.947089][T29176] binder: 29171:29176 ioctl c0306201 20000280 returned -14 [ 505.955024][T29180] binder: 29171:29180 ioctl c0306201 20000100 returned -14 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000fffffff50a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540140000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:32 executing program 2: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000432fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000008ed16b58000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000007fffffff0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x10) 05:26:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540600000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000f0ffffffffffff0a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601010000001000000000000000000500010007000000"], 0x1c}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb0, 0x1, 0x9, 0x5, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1386}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfff}}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000014) 05:26:32 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000532fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000020000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:32 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540f00000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000060000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6erspan0\x00', 0x4}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000632fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000030000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540b20200280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 506.642514][T29226] binder_alloc: 29225: binder_alloc_buf, no vma [ 506.679896][T29226] binder: BINDER_SET_CONTEXT_MGR already set [ 506.702742][T29226] binder: 29225:29226 ioctl 40046207 0 returned -16 05:26:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000586bd18e000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000040000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000300280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000732fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$apparmor_task_current(0xffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x3, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x7f, @local}}}, 0x3a) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='\b/Im', @ANYRES16=r6, @ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 05:26:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000050000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000a00280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 507.047030][T29249] binder_alloc: 29247: binder_alloc_buf, no vma 05:26:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000ffffff9e000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000832fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 507.109135][T29252] binder: BINDER_SET_CONTEXT_MGR already set 05:26:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000060000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 507.150749][T29252] binder: 29247:29252 ioctl 40046207 0 returned -16 05:26:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000e00280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601010020000000000000000000010007000000000000"], 0xfffffd75}}, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 05:26:33 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000932fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540001400280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:33 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000fffffff0000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000070000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:33 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x2001) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563f040"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1263400021a8eae3043cdaa8d4f44a02f7934e399b27a84fa0787c1d5e9c7d36e8b8804545f748563373d9472ed326663a9940ba840d40d591391728313397c6410e5aa3773fb06416d52d26f35e0a7cd8b5657a07a24cca23d4dfe69e6138a356f307ec7445b700b9b3ead92755eea4ed61100929f8721f225f3f31f40da8308bb1324ababcb565d35bd0d872fc3164572edfdfeac6a06c36d09d8f08eb6d1cc17fedb1f7fbb24965"], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$inet_tcp_int(r3, 0x6, 0x17, &(0x7f0000000080)=0x9, 0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x0, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x2, 0x3, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x9}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x10000000) mlock2(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) 05:26:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540003f00280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 507.557374][T29281] binder: 29277:29281 unknown command 1089495813 [ 507.598344][T29281] binder: 29277:29281 ioctl c0306201 20000200 returned -22 05:26:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000080000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a32fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 507.643884][T29281] binder: 29277:29281 unknown command 4219666 [ 507.662086][T29281] binder: 29277:29281 ioctl c0306201 20000100 returned -22 05:26:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000f0ffff000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000080600100000000000000000000000000500010007000000"], 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) openat$6lowpan_enable(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) 05:26:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000090000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540006000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 507.883543][T29300] binder_alloc: 29296: binder_alloc_buf, no vma [ 507.920297][T29300] binder: 29296:29300 ioctl c020aa04 20000080 returned -22 05:26:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054002b200280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 507.969873][T29306] binder_alloc: 29296: binder_alloc_buf, no vma [ 507.993761][T29300] binder: 29296:29300 unknown command 553627648 [ 508.004698][T29306] binder: 29296:29306 ioctl c020aa04 20000080 returned -22 05:26:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b32fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000007fffffff000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000a0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 508.024553][T29300] binder: 29296:29300 ioctl c0306201 20000100 returned -22 05:26:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) 05:26:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000b0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000f000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:34 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c32fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000009effffff000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x143200) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000100)={@none, 0xfffffffa, 0xfff, 0x3f, 0x1, 0x1ff, "e028f5a9e4d3e194785956a2c5b560110a8613b265652db172fbb96b551978d730892d1b7c36dc206146e934660ce9bfc4544bbaa7abeab6731aff3fb5ff8f675eabaaf93fcafd7ec7189912478ddc41e66fba728b172f5bfe8d6352876abb7272f87ef0917f05d02d8bc7bb03856de1c89bfae08b3501079fc1b01a7438045f"}) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xe2d) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000080)=0x2) 05:26:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000c0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000200280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 508.463197][T29333] binder_alloc: 29330: binder_alloc_buf, no vma [ 508.518830][T29333] binder: 29330:29333 ioctl c0404309 20000080 returned -22 05:26:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d32fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000e0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000f0ffffff000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000300280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000021c0), &(0x7f0000002240)=0x60) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045540, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000140000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 508.783881][T29351] binder: 29350:29351 unknown command 0 [ 508.818087][T29351] binder: 29350:29351 ioctl c0306201 20000200 returned -22 05:26:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e32fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000400280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 508.845809][T29354] binder: BINDER_SET_CONTEXT_MGR already set [ 508.883675][T29354] binder: 29350:29354 ioctl 40046207 0 returned -16 05:26:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000340000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 508.894625][T29351] binder: BINDER_SET_CONTEXT_MGR already set 05:26:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000190000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 508.928879][T29351] binder: 29350:29351 ioctl 40046207 0 returned -16 [ 508.957310][T29354] binder: 29350:29354 ioctl c0045540 20000000 returned -22 [ 509.028185][T29354] binder: BINDER_SET_CONTEXT_MGR already set [ 509.045357][T29354] binder: 29350:29354 ioctl 40046207 0 returned -16 05:26:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000a00280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 509.077641][T29367] binder: BINDER_SET_CONTEXT_MGR already set [ 509.094099][T29367] binder: 29350:29367 ioctl 40046207 0 returned -16 05:26:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f32fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 509.118899][T29351] binder: 29350:29351 unknown command 65535 [ 509.125520][T29361] binder: 29350:29361 ioctl c0045540 20000000 returned -22 [ 509.135142][T29351] binder: 29350:29351 ioctl c0306201 20000280 returned -22 05:26:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00004c0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x3f, 0x1, 0xfff9, 0x7ff, 0x10, "a8f28e48d84cad67"}) 05:26:35 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000fffffffffffff0000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000e00280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:35 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001032fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000600000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540001400280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:35 executing program 2: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1}}, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000000)) 05:26:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00006c0000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000033fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000010008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4001, 0x0) 05:26:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540006000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000f00000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000000)={0xffff, 0x40, 0x761, 0x4}, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000008141d0100000000000000fa1bbe00b91d0000000005000100075d50a6c64f43e4976b6ccff0ecb50a0a8d46b318854492ad42b1d138c4e807a9fb88ef9611eb4a06b2fbeebff1673e9efd7f170e6d8e174dd2a5b801000000"], 0x1c}}, 0x0) 05:26:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000f000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000133fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000020008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000b202280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 509.866295][T29413] binder_alloc: 29412: binder_alloc_buf, no vma 05:26:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000300000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000003280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 509.992768][T29413] binder_alloc: 29412: binder_alloc_buf, no vma 05:26:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601010000000000000000000000000500010007007000"], 0x1c}}, 0x0) r1 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x200000, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080), 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x48, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @empty}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x2}, {0x8, 0x2, @loopback}}}]}, @CTA_NAT_SRC={0x20, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x4c000) r2 = openat$pfkey(0xffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x181183, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, 0xe, 0x6, 0x385, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4810}, 0x4810) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x3000000, 0x20010, r2, 0x82000000) 05:26:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000500000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000233fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000030008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000000a280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) splice(r1, &(0x7f0000000080)=0x509, r0, &(0x7f00000000c0)=0xfffffffffffffffb, 0x1ff, 0xf) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000806010100000037d5a4884282f2859f69a299428a9a242a12d2295736000500010007000000"], 0x1c}}, 0x0) 05:26:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000600000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:36 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000333fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000000e280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x6, 0x80001) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x4, 0x4) 05:26:36 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000040008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000700000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000014280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000433fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4144) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000180)={0x2}) 05:26:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000660800000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000003f280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000a0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 510.762302][T29475] binder_alloc: 29474: binder_alloc_buf, no vma 05:26:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000533fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000900000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 510.816527][T29475] binder: 29474:29475 ioctl c018620c 20000180 returned -22 05:26:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000060280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x8, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000a00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000633fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080005400002b2280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000e0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000b00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:37 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xff, 0x1, 0x3f}) r1 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r1, 0x0) splice(r1, &(0x7f0000000100), 0xffffffffffffffff, 0x0, 0x800000a, 0x0) r2 = openat$vsock(0xffffff9c, &(0x7f0000001280)='/dev/vsock\x00', 0x802, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x9) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) io_submit(0x0, 0x5, &(0x7f0000001540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x1f, r0, &(0x7f0000000080)="718c807dd114a8f3001d0f12a026eb85cc008c1c8896be9f8686d133d6da33f1e6fa5aae8c4a2e4b82cb927a6051e1f649fbac93c4b0c44ebfb122f6368b00", 0x3f, 0x88, 0x0, 0x3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x3ff, 0xffffffffffffffff, &(0x7f0000000200)="668cd58bd5811e17caf71d62625aae89ad619d6a56a9261fccb71b46abdbc720799ddc94a77b320aec3fd27ece98ef712097fbc29d5c933db90e477d8756c73393807e5e8f75", 0x46, 0x0, 0x0, 0x1}, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x5, 0x94, 0xffffffffffffffff, &(0x7f0000000280)="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", 0x1000, 0xb72, 0x0, 0x2, r2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x1ff, r4, &(0x7f0000001300)="d6425074585f894731459a1bf5a19435b6d1d579f14b21b2cb4fab92ae19bc5a2eb088fe6bdf9ddf33a04e0bcf38663915a95f05c383c266452e949280b2048902a588290c750a1d638725f925c465fb493b55cc7c6d3f84e7630d07d655ddae387571e0952ba884b226d440380331943810312b80e98cff334d96d7e778f464973baee18180315f7ff6cd98f58a534217b175c92ecd70ba5b6692d958388548f3826b4f209eea7d2e1b51f3f46453970978d8b72d5a653c824187e2846a415587b9642e0848c88ec55a001c8807a7e51118069763c925630f8aede82454cf7755d9911251618f7c5bdd310e45c38a3b", 0xf0, 0x2, 0x0, 0x0, r7}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0xfff, r0, &(0x7f0000001440)="2ded2ea16c6433f53389f8448980e0c155cd4d6bcbf2211564ffd6509743a67615f6ae751d61c2904a38213c2eecc526d4bec3bd2fc879662bd761c92a58bc1c3d5a31085826a367db6b39238452d769f8ec6b4f4d86b49235f3ce1a9bce78a0a054c2a6c53c107bc30eca184986d6d740c20644df8e3d5baaf55e90d1bf3b04cb4e52e45338c25225ef698dd50430ff813ee4048b94764b4b3b", 0x9a, 0x2, 0x0, 0x1}]) 05:26:37 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000733fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:37 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080005400000f0280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000c00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000140008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000002280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000833fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000003280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000e00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000008ed16b580008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000933fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000004280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000001400000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000000a280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000001900000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000600008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000000e280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000004c00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:38 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a33fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000006000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:38 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000014280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000ffffff9e0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b33fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000060280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000086600000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c33fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000006c00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280300010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000fffffff00008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 512.801808][T29583] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000f000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d33fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000281900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 513.018388][T29595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000007fffffff0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000004003000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000281c00010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e33fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000340000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 513.274262][T29604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000283000010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000f0ffffffffffff0008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f33fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000fffff0000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280903000073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000010000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001033fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 513.656862][T29624] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000020000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000020000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280904000073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 513.854154][T29635] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000034fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000030000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280902010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000030000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 514.070789][T29645] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000040000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000134fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280903010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:40 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000050000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 514.297088][T29657] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:40 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000040000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000234fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280904010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000060000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000334fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 514.560283][T29668] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000a0000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000000028090a010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000070000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000434fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 514.791949][T29680] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000e0000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000080000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000000000800054000000028090e010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000534fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 514.992121][T29690] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000090000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280914010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000a0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000140000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000634fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:41 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280960010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:41 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000b0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000734fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000600000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900110073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000834fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000000000000080005400000002809003f0073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000934fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000e0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000f00000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900020073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYBLOB="08002dbd7000fcdbdf250200000014000100fe8000000000000000000000000000bb14000100fe8000000000000000000000000000bb1800040000"], 0x2}, 0x1, 0x0, 0x0, 0xc0080}, 0x8041) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000080), 0x4) 05:26:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000140000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a34fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900080073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000190000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000300000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 516.080559][T29747] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 516.112786][T29746] binder_alloc: 29741: binder_alloc_buf, no vma 05:26:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900110073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 516.211986][T29746] binder_alloc: 29741: binder_alloc_buf, no vma 05:26:42 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b34fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:42 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) 05:26:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000004c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:42 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x4, 0x100) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0x101, 0x4}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = epoll_create(0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) 05:26:42 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000a00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900000373797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c34fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000600000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010273797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d34fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000000)="e48c822c669d32308e2a1204fde9bd65060b65") sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000008660000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000e00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010373797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 516.810036][T29789] binder_alloc: 29788: binder_alloc_buf, no vma [ 516.852422][T29789] binder: 29788:29789 ioctl 4b6a 20000000 returned -22 05:26:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e34fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000006c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 516.896072][T29789] binder_alloc: 29788: binder_alloc_buf, no vma [ 516.909884][T29795] binder: 29788:29795 ioctl 4b6a 20000000 returned -22 05:26:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0xd1, &(0x7f0000000040)={&(0x7f00000000c0)={0x63, 0x8, 0x6, 0x500}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 05:26:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010473797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000001400000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000ffffff9e0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010a73797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f34fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000fffffff00000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0xc000) 05:26:43 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000006000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010e73797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001034fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:43 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000fffffff50000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900011473797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630140000021008063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01404040"], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r5}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x84, r7, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x84}, 0x1, 0x0, 0x0, 0x11}, 0x4004000) 05:26:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000f0ffff0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000035fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 517.643759][T29842] binder_alloc: 29839: binder_alloc_buf, no vma 05:26:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000f000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900016073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 517.701802][T29845] binder: 29839:29845 unknown command 1077952513 [ 517.737142][T29845] binder: 29839:29845 ioctl c0306201 20000100 returned -22 05:26:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00007fffffff0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 517.825804][T29845] binder: 29839:29845 unknown command 1077952513 [ 517.840236][T29845] binder: 29839:29845 ioctl c0306201 20000100 returned -22 05:26:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a030000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000135fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000d307301163e9878a9d4fc04a4f070008060101000000000000"], 0x1c}}, 0x0) 05:26:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000004003000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00009effffff0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a090000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000235fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000080)={&(0x7f0000000000)}, 0x2, &(0x7f0000000100)}, 0xc) 05:26:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000f0ffffff0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:44 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000340000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x10) 05:26:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300200000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:44 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000335fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000f5ffffff0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300300000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630500"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000140)={0x7, 'wg2\x00', {0x8601}, 0x8}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELSETELEM={0x2848, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2828, 0x3, 0x0, 0x1, [{0x2c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x17, 0x6, 0x1, 0x0, "30554dac0cadf8d126157ec060cc6045a1f0dc"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x80}, @NFTA_SET_ELEM_KEY={0x1ac, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x64, 0x1, "c99a8dd635a17c4af679dd6924db350a59591cfbb1a2d5d05c07d15bd26dbecfff534aee68fe45048b7a74de236f95b8f21d98d72f54acf0d53251997caad20159e493aab19f4ca4c49f23d6cee9f41998e6ab21cf00e2c4dd219c0b9c917248"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xe2, 0x6, 0x1, 0x0, "1b5e25b539e162604954efc1ed52589c6b506a537368afc72abf0db3983806bd0d73e7f4ae053e6e0a8241fb9343274b2ab690f6eea6a7de9f4a30ec50d3c899a527bec09a00030813d3e2dc0e69bcff626bb46d1c07269d71a3d2da5ce93dd8aea169dbd42c94a1e24826424fc8bcd85c786e576464b96376b60c1a0178db2afd9258729b3f64815cb8d8a10f4a833fce5fd878d85370ad6fe42922cd52116842dd6e5323d3f7226e7e1b0baa06e0d3ec2f33fb46f187d4a72035bde6cf2f60b2ee6d6b0e7b51409625cb09357f7d36f90b562cff2a9d828bdf429686bd"}]}, {0x1420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x204, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xca, 0x1, "d5177fe39cb1b38016decf7be6988f398fc81ed7df80dac28b281d1455a619ebb0372a5afcc820390c6f44f032f972351d6c6db9400fdb6bd041d5ea34bf4f33e319ebaa4cafc845721e9b8a1237086f9d545bb50ba7b96b96953e5fc380d86a2cd19f8ddfd95163a80387b71bbb95985a5dac3bff65d45d5bf2ff727506fea6af527e786e5f74d8b93195d4051383404131f429247e2711ddc19e123cf567720a968088294f69a42150941e21db8197f6670e7f4cda33b34852ffb92cf08c3aea6b2c0b4d67"}, @NFTA_DATA_VALUE={0x25, 0x1, "fa9d6550bc643291598811c40c45037eefb6981cd2e0b59c86591c6f6ead4a8727"}, @NFTA_DATA_VALUE={0x81, 0x1, "f2e82e0a553c7113d62851c04d97d69be4d31d6e735e003f256b216042b92704ec0103d5ea4dd49854697fb100a337a654677d291a3f5cae7b227145136a2dc4d2dbffb2f8437e71d0f96943db6edd1ab9985c6e01210923384b7d143ff4d06c4447b7003398e5874b523cf61623368d6173181ba15f459b7dcdcd0219"}, @NFTA_DATA_VALUE={0xe, 0x1, "90e15a96aa2f95ba05c6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "32b31e3e8db55a5e3d6185c8d8fb86b44e8198928eb2f7dfe9aa496c8b26e491643a89a965dcf9b5b04a1cc6038b7c9048cf6a818f738ab644fa9c6680173018fba05d35b3277de796707389506ab59fd25ccf03c1280b99ac539b1d78c14bec6416be778b56cd55191bcc29c49f5e2bdca8f701a3d940e4fa8b7d4e1ba8c16616d9f92d05c45b43c23e0a4c27a76839e2d102b5fa8bab0a1edaa2a38cae7efd30e8a32a295077a378bfbde12318abbeb6465943e95773b408f6fb38161267616ee4e17685de410d6ce14ddba6c97d5af024e6b8b351901a118ff9439c519e87dc2908f02332f1647284b00f5dd4f3e027c2cabcbcfa6f6808ea40163c47e2604bf37ae654ab755226d8bb3eb7262b11b0b28b886b5f55e73e16b2e870dc833dd0091730ecec5f32de4f7fa7c77e2656066a383058b75b72230fbff480342051955b53aac3c167b3dbc322ad4342b64255f008d0404aa80610e6d917aba1ffd3c1addd67f928378be686864f66cac0041955a3f961f783d8a38047dfcc01768025790e47be070bd23e839c415b60ac3f56cd721500e67af8ca1c5a79bbd5f2f061c55d6edac3099df34de5f8e0fdc1552682a9f1c1ffec5c76962d31402357d12ad8a79cfd105b60b50bcbe586ebaabbcaee95e219bc859674ea0b681b0278f87c6269f923e01663f51142f2871bc26f80466ce35f014daafdcff3b13067f72b2ba5d709b08d66b3b0c0ea73ae22cf2db287e9900a8a38d7c53ff35c9efcc1a9df7eb5a5ee2b741cc048a694430786b3d38a0fddb5971ed40783dc12c5bc7129d18f4319b3167395eaf4dae83b556dddc30c12a9c460dc99b5aee3b39af62fe8f5732f96869aa8e56796aeb11332554d55593f6b1af008203630f212754b5c243fa2fe08d55bac3323bf474a6b4991bf508ffb9dbb49be50ccdae91d598b79a7e0b302263d7dcd10683da6aae47175c44c30c81f96e55db5f08e6a5eb92cea266ce4fa35488e54057843bff2d09e4f337921da4a753df555eb325ae78e4851c195c41b9aa6750047d47e37320f833c5aca7f176485ceeb343d98b5cfa00518f35824709634d6a5c569bab116c9dc26ae7284e9c06024416fa9abf9008516833d1194fd6e6e4c98a5b9131b9a261b56b2cdc53669f67e4586acba8c43e6e18e63dcdc7b330fa6fc9059b7923ae7b99c99ec9b4c0014227f7b802a0b16301db6b8d03ef367543ab3037170ec9bd9c608e09b81fc9af5db81e6fc1a7f1f8d976f25576c892c577922e770b5d7ba919ba1638f77d357bf30ced043e3b4c77f8c9a261aa33abf5f22fc9913ef872d5f0fcdce98e8844270e683def74155514be34536722a98c147cd70433c77ded1297a31047b0fde5c2ccb67f785bf228bf3471f75ad87699952800f33d98874b5483a87a78e08da1b80206ecb642ff7f20801739d1f27edf1288e6cdf81239096cd625a3f760115329520321c5c97ecf13a21ae51871a20e6d1bb84f77b759180ec30d24e2ba776172bf4e20c8fc47b369d9f14d31437bf5a490ce13b97eeac135fa8510eaa49bfda355d51f9604d69c3a2dee5c73fc3a5fc8d7bd5303c6a9eba39ff4b6840b9cefdf28d11794365cd8a989b6fe75e5126eac569f8422fa3afc226144a43b066493ec4764e2a6a4dc89d7603c572f3d291866e32c6b9c41dcbef1dec695e332d4cfe1f3cbbb148f7a222238ff8c342c77e0bdc19cbea74a5f36983a1309a8fb195b2b24feea6732f89531c859e70a77a17b3b8d8fe8bb7cc098dd584066f05a92524e210d1dc0ec2a5ce40c1e1675b902e18984d31d6080ad9db647dc6c0cde84684d785445c6dec8249c2b788c62470365dc0e926ab5f1b8abc908955277361649524c611702ad55d1fc83df1681347411d8c2c3bb78bc6f68bb9daf9de522c9b442835401fd34dbd4d19779ca9331adff4b0da23bbb4126333a0c98c584c28830621cfea7fdc356b23d0bc3d5dfc3e283d498a32ca8d5f00f4a6ee4e3dad95ba1c690aefa4fdbbe695a3b477261f2b9a59e5c006a8e1fd88af57139cb10e3fd2a6a8edae47e4d034fb0cd3a5399c2694a138d3402d2234927ce82c7094453e6173e75effc805f3c48000f3c7880719deed2cd5365f5c4be91befbee92de87ad1d6e486a8416e6b94881a70ab21123f688447deaae5cb96ef05dd0e907950e0d39efe1b2b28185e5c25bfa9b338ea66aa8e5247c981d34bbdabc3f4bc04d502cd622928e1ac6a82a77d04afff02afdcfbb61633faeaf89e8aa55950e57f70ed62c13efaf7a0e683b9fe8d2d771906401ec3d29414c14364e38aaf73b712aa494c7515e3f67f53a0039d544e1a13726c0f54c2a5c665f56db55753a20a6904735554312c97c18e09959e94bac263746cef04294b468792a9ce453ef5c32270df06cfb737ba67f54ac12a8e3cdadc74b33b5f217e1eeab1828a6dfb583ce6f36b24872f4a4c8393f0be2a185713cfe56b2927dddfa12f6bb4b5eb944a3778ee5158a2637bffa1ac24e8601eb431dc007a003f09ab406d5e395bb17583cede4e5f3e88c10390f2dc6eb81394d6d2d241ceebafb7ca069fce0bc7e0c7f04443ea80195cde41ee3cb05d9fda316264637eedb6853a27b3997874107c020b1f04abd501ddc7e70f08ad9e6ccb673bb741109e05fb0e6fd100aac05f1d7c53ee45024dc4f54917f182adc5aea642383adb83e0a70d5f3b8e569add5d9327a9768d75d602331bd416f03b528d7d95450a1db04590e1806de3228885944f788e98158f0fb0183a696b1ad450f7e8bdda9ef63c50d4b7aadaf26e79597d61f41a942704f8ba5d2e0bfefa201da65b2938b539241ba86e116114dae294e464196694c164a0889232cd839eea514a599f0c7156a488ab3e626a24e19e35d44073ba663f1bd220a92db8f2243d923568851bbc6a05e301775b0131b2266feba03f046b1710a342d20eb7920c93928cc7d38f784c5dc86d453215a04a889a788f981a904ddd4fc49a0ce36821040dfc2aecad2c3243145949bc71ccdb9e9da34adaf7b50822e43d04173a98ea5e07e61ec72f8bd8abacdb173d1298c5ce6b70729afe3c10dd5143d03540e7f9d8415a614326ab266a708d186715be0e8fc6f8e7cd7ac57b0b1306cfdc780dc9a54284227defa79f55aed383ad4f2aae7eb8daa65b74ed484089c5e99aa059460f7df6d2b00e2e0693144d7c03f571f368d574f9fd34a2b9ad7a70da9aa823a2e37832791fdcc9092d54a4b1de78541547b997884e632ee236aa5862751cd2192c5f5f627c4e97daf3573242274ba3a4a6c80030c0c201b0d62a6a30c1a884c5a2e59a03f853d350823aca20b1afe6fec0487e20120a08679db56ad1c132b64d6f71fa9643caf691c7de8ece464c50c75b60bf72adbb8c7a91829c1a4d4c63a94a56b03721acc9f6d60d94f4cf1eda66f525e7ae0f0b737558c409b9582b4f48236e45a2d5fe61bbfe93d67df7e9d9606de8be5d6d622b57fb6c4e5400771d6cacfb915f2285bcd619110e153ead78b88a045f00756b34a9ec1aa41c9a9fd2d8742c5e1cdf964f7029e796242529f6f4236d111e7b279ca4dd9548685019e5ad46f6530a3f085252fe3e5cf0477ecaab2878c8ab07b8f15919de6dde1b499229653fa15562ec596a320a61023c688b4c73a9c1547d11759bd3adb4614e2546c3c14c232a6975fc26cc7e987b91d5826759874ab46a8d1438f10bccfced354dd1500aa21d2d8361acf049f4cd3be513548244b16d51a9091264e787bc8638718e5a90c8458e6a26925e93f9f71c7fff8a1935f7f03c8cc3da9919e0a2ac622a6df982edbb3d8757d03dc60a3bcef876d7e29cfddebc654b3f0ac22ee361600bde6e6a13ab0b99946f6c55b60bc5cd52bc0950466c56d78ddeba56162550d697d7c0702327300144e055c731e22e3364a043e59ff81b1ca72dc16cb7cc640c23cf357ecf5444274d07156aaeaf7e0f2775733edd218504835e66050d3869554770eeac9a459bae574708ec621a2e45f810e140e6fdca4f3599f4f7f4fca396ae9bc9697c7262ac1709b0202ab757bf19af983646215e0b2ea9a03c593224b57866e08c0069903397428c95bcaa75424b958ae792f0805b65985748ab69ea0eff3fb4e2a72dbbe884fd69972aaf0729dc18565ac18907901afcbcc8c3baa0a144a26fb338f0440fdd4515643992529260ebb677a3ffc646eef586a897cb6d8546e648dd3341a9b3f7131d99907430b127663f2dddc066971426f10870035729769c13ba88671820ce64ec4e4be5432a3c8dfda71e3232a3779ca55f81890e7d7c880f898774f77cd7a5c198eaaeb63e6d90b7f4db3cb7707e497463bfae269c7bd470059d00a641da9d6f741b4ce6e10ed2754ead10b1d0584362ac08fcba001e6c3d405dc5941ac05e808b1b19269a8ad108da88f799ff50f59ff8897ad13d6c5fa5ec408629b15e2de7fc2da0b0ef61a0dea8370721828db021f974d7f4076bb1d42c3df5dddac697a3b94be8d2765a72e97536243e318458ab1ef878d44eed9d6479842aff04b6e67a5544558f22089d29b967a37e5948ce51e16026c79f64b0f65894d08327f3df3e7a75d3b181d9c82af94a85ebb2c55bfba55517ada14082f708726b2b8c2a72b9ea008c8257b38fd20aaac4f3dbfb677dccf1f7476e973510ea625cb98a73b563af9a4f8284555e240c6844da43bce268ef7b4b0fc11ddbfbcb9fe6d54cdfeb9e2a6e857b79588424b671f4d7341f95f3859a6b227eb9ce429875dd12f5b0ae0b948e37301fa16251dc3878e23b4781cb385780264969c04fd72fcd1ee707665f4da80789f8b2e09d830dc58aad0fc432f53596f6f85f4f4d79eed2b678ca959c8314a31dec184df1ba2907441274ba8f97b6ee7f801124dc65e799d1563a3578d5d65038edfe86d3ab9ae3362dad5723d387680a0888e9292a22f8d6159bd4640e8cd6681235ef978848152ce9c04a27eae460e2b0c08dabd126066e70b02ff225545d4189b996dcb9917afc4689e73b7da4a02dc7f922430afbeed4d02110cbb75f438aa7594dadb3ea28a2a880fa5dfa7b08d5c96a9d3c574e11f7d156d97cf864acfd37285c09d88b057ee972d0f30e2ec6aef2156b3fac1e8914a6990be43f6bde955f0cb67560cba7808992550d8c1e9db5aca7b0ebd95130f5b9e1081ab5e70dbe94da21b42a13e73d9d307bca1ffbcea405cd22e53b83b306654b7f384d411b7804cad59dfa899fa20fbc2d42a580cfa33c59568d4f80be210571f545aab0dc880a5219ff645d8099224bd92d024fa78da54da3721331c494945b9554507438586ba967926132447a64c5bcced9e681ddd4c3091bd57e25f0f281630472d3b6d63c23aa03e1f66538f2c85b4eeb9d28ac2e271e1061e4907eb22d043c7fd234c3366422dcaaad79471c9e72f22cdd27e3ee574fa641846e509587be75d3ce2c89ae92959687dc39c4bd2c527fd10f114d3db91f647b44b792a85c2cbbf39ab11d6281e876e9711164100d17d8d536b24c2d951ca1d8bd8532f43ef505a8dca1210a0bccbd541d2b74b29c49f89600f6cfdc70d6ec5311e8331c88cea639a47747fc8af2d9572f5be826fa3f05d2b9649931d20d6d12d79b9553bdc7c1d1dcb0ee449eab33c6c862f969873c2d9d2ad726f2caa1f02e317b68a088ab26d50ad9a03f85eb277fd8bc72a4588e8b89e66a31b7baf6e08134e8bd45fa6240e37c046ef621b5c445dcc33864ad10fabb615337e760ff0fea7bc8bc722841"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8304}, @NFTA_SET_ELEM_KEY={0x1fc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x53, 0x1, "c4a6e8486e38ba582527a9cb53df6e925c96f48a8484f6bd1cdb71a1f115abe96b01147fcc03156f19981c52ca22a4aede6d626b26aa33df21bd2491dccca55e6ffc8c57f16a21d6f879723c07c0b3"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xc, 0x1, "4c554380ccc87a63"}, @NFTA_DATA_VALUE={0xdd, 0x1, "af19c25ea04cfc4049e6b2b2f07f431ee953a0bfdc6600e01afe21f9c4561447a3d874e4227d1009ed00f43f1f5d23c63d72d03c0a15fcdb7fc225e4f6bd8674f32a1fcc177c9457fedd39616fa0ea206180f81306ac5ffcafb1f4218453fa52f4b571646fbead3a5ffc213ece00452ad2291d0bea516e903be6179df4f32fec382ed2a86f77851db5ea45deb3100945550f990bb4b422fd7c59c28a202bbdec4c631cae742f80909c6762b2dea1b06b70b8256a37f20b7ac5dbd700d3deec498ba166c28b6f99ecab69603bc256061b051cfc296495313f90"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x53, 0x6, 0x1, 0x0, "e58791e482bedc282bf18e96e8d3b573b4732b4d596d07004e75a6e7b9e17e07a84de887b72ef803dd933324680063e3b5e0a3586a6ed73cb3e63ea11a4cac51e86e9f84d047f04e00032a9a25df39"}]}, {0x10d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xc1, 0x6, 0x1, 0x0, "f08e3bd745a0fe7af790ff5ad2a31d6b8661122578045384799208f299148ca1cc10dc045263d4651bbda26f8a849c3988fb5c4bef9fbf4994de19a209970f7cf093ea342c07c8c67c08043ffd343aaf38508b56ebcb76e86743cd747ca2f89c9216218aeb9f3bff0d2e24e1eb1c43ae86be44b5ad36fcd067c77af03971fd5486792c6dbfef781e43978bc203491332ff33a39b089d37fb7a9a15e4f5e57889783324212addd38194137c76cc385869f6056b8ac2d8d9f0d79c3ccded"}, @NFTA_SET_ELEM_KEY={0x1008, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}, @NFT_MSG_DELSETELEM={0x3644, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12fc, 0x3, 0x0, 0x1, [{0x198, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0xc2, 0x6, 0x1, 0x0, "48cabafec705945d729433bad0cd0d51efb7e4385f7203f06378f5cd7e0e7d5b49891be0dae4a77a5a1c56db3f72e0861a1a151a3f7ce133fc57590c547fe82f151d04393e7a844fba3ec314333e42c0e0a2742ca4298e9c8f84f811597a4e91417ffc9780980ac33f4146a8971300a66f3564a83342011b4dade9ff6cf3a84e8fa7aed1bc7eb3ef56731a8849d42a3333f2ca2e2396e502afba25b3b5b0034d6123835430510e6229d0b42c6ab0d260fc0f27275d1c2fc2a94f3389cd9d"}, @NFTA_SET_ELEM_DATA={0xcc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x32, 0x1, "ecc27aeabea2897c1552b3ff9665fb4d988aed6f4d0f721700800249f61c974c68edfe6534fec20fb01dde5e6c41"}]}]}, {0x10e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x91, 0x1, "54acd6ad8ac767260a36fde0ce96d140952d9481762abe708bcbd16a22f58fd3bd2431d24cf83cbd47d3243d5fb314e1f2048f0659fdd5aa92e212a02b8aa7d404109fdecc38e963e8d0dbd6082792ee8cfdec6eeb8a9b265c569959ac6263370aa11cdddec6deedd2be00a24975ef54c26fc34f28315241d375375264e181affcb8b0dbd393a83aa65ad12248"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x80, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "c58c3fdf1cb8bb9ff90d20552d8356d260a1e074946d502a1ec720abd3094552af73004e84f2ffca7d16e981f1425dad490f2d7441602d663e"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12e4, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xb45}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3ba0}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "ba8f734bf24832c9929dbfcacb32f3f1d4b7ce8ba7f9842f865809f9d973dcbc88ef1026addbad184d"}]}, {0x1284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1280, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1a, 0x1, "aa7e57f276a2be951cc9347b93a058f6b9bdf9ac6784"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x6d, 0x1, "910650b775f0abc05db43409b2bffcd18f5577b6c4a29855fb628db22037eaaf3e898c94c7867530150ca75c65d0581dff8b78b64429729e84a36265c81129fb4eab7da5ee6b233dfeacb2c125366a8b0a8df4e478662ae3aa5162698c881d623edfe537f6550996fa"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x22, 0x1, "16121218b1a597a46478fd65d64c46c6b747ca26aa39f29bcd1427e2cb00"}, @NFTA_DATA_VALUE={0x96, 0x1, "52a7f6fc6e1a1af316cd9e3fc5c93d93ac9044b029dc922d14a4b03fec9d215d5ef89a13c9e46de65c6626c19194dcf3a66012319a811135e7a9db669109bb7c07d452d95bdf4c2de976b5f742f8a3e4b7dab05448d19c364775e43086255ee7b3a85dcf5eb1bb52d974456dc254c56baed1a1c4f7eb065fe90f828977456800094efbd8cdb3b9c74723e2156d7a19ecabbb"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "2c01678f1d472f0ad07b0518a754fc4fe9f40c968e33b044260415c046ea31e45fa99a2193f4c6273ccae296b8fc2fe56d642daa48d88899a81db0277c300328dfece07a137fe2412009e00ef29ecc1183e1d71b1c25"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x101c, 0x3, 0x0, 0x1, [{0x574, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x99, 0x1, "0af877e5568433b560a7f2979d448c7e2076db00f38341d1c81129302a089e14b22d859a119d294c334f2fc31ac740cb01514c106b7951e3192526c1b70bf58301c09634b425577b11e0856d4c32ec7cc629054dbdfe2c74f09128b089dc3086358e9e1e1557c766b04a5411bb7bcbccfbe15a47ff4983c54b7174b40bd7d91054e36542e1522be816080334e00017a3bf3dc15421"}, @NFTA_DATA_VALUE={0xaa, 0x1, "92ec094bbc88e25ec9615d88a254a456e1d06a2affea2fc9a5ceab6e95fcae05ed3091d147c59d6d549c61d815600646ed308d948af4d796ceabc2faf82a850384d88d8cbe93f28d660ea68c07d18d2f57214927d53ad5e0b378b4950f695fbf9912136b2b4a54a56dea26386d863ba55bfcd58347cc526e5c15dca9929d134f4f67fbf648d1faea206db5d8073c76e2caf422f4a4749c3c072489e3914d3c9d2a9ce87afa92"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_DATA={0x394, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4e, 0x1, "69cda609d72eade80fd6ec30a183b6a19d751c9bf4213f5fb4e147f9f97fe566f2f741768e4b530364c669e183282fef044f2c0d9c4083b01f28abf71585d23a12ba0f7bb2028784d8e6"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc6, 0x1, "cc6df9518b9d5f2226159b1df06e5f93e1503fe5f3ca00b0417cc2f393232fbb0913f49c4639ebbd44b8eda9d19d87d813f7b7a88b6e1047ff189993bfd581669170b927e2db4cae5f9378753b7d937555b67b05e52a4a3b576fee7b77367b6d6ffcc26b6921d03516a33892338528576cd0fcbddf12ac52e0f7c4b833e9f6f8c93962398b4668f81355cd4c599db40e8495e7d4d97ffaf87b503d13bba9dd635580111ef6e1d59369069e750b606ad33e2a2ef25575595121c4965673ba57a08e2c"}, @NFTA_DATA_VALUE={0xd2, 0x1, "3480735ec6d0264bcd36da47ade4e2cbd82fd9bb74110dd999caa7baf9349048a0c860926a80e4a66a28dcef68f8369afcfa3894c092a0b7bab0a353397c2edfee902f89292b7aa1923697f83bbb6604f1d28430199f744cc3732287ab9037554ca355d7549a6a1cec96a87f901ecfba6907b3e6d356a00cb1a084753b7efc7656a6a4a1654d05d988db978e62b8bcff27132887de9b3d2c876922a65039cfb8267da75c02b2dbd669457f0a38bb902d4bf34ccb3046d477be67c6448ed9fccdc095cfcbf5a9cbc1edeb2e06ad28"}, @NFTA_DATA_VALUE={0x63, 0x1, "99963bdfaa6c0fe26722f4291d5444a8e3808b277a2bdf3a7746a1f49946d97cabca2ff6437de9c9c3a762cdd4082f6e243b588963b305767730d0d97334a6c2e31139f4f2d60e09f496f4b8b709d15d7216af83f634bfc8fa58e9719099c2"}, @NFTA_DATA_VALUE={0xec, 0x1, "e1b728436c5cfc04dd7e60c4af97efe4c84de3d6e99b578be6a6b45c643d35b10ee99a80bf934d5ae7fa24ca3f2d661a6e1773b1b24fae89f7f7cdb9c62492e1384063f5d6f88cb400bca0dff824486448511d45520b2f1d3d7c2bc5250fd146812d222cc1dbe215c33119f63e2e1f7dc74e157151e91135e9713b80326ee5ea5ee1c6432379d5e6389c1d68b81fe86f761052b39f20fce55a298fa176105d31a61311e2f9d7e303941275dc2d0b91952572f50cb15e4b980cd0bcde5eedfa233c97495c487bb897d2d90c01d3219bc7403ac9dc70fa42c598c063581a3421c3c5ed91bddf28e42e"}]}]}, {0x1f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x1e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "4f7904030753b5"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x39, 0x1, "d718c631c12910a842faef77e98a614d9e6d8ebabe28a95b2c70f487ed957d337fafdef9079b8b997432f9c04dc7a55640c7a208dd"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x8d, 0x1, "f3ec4cd0af1576a38afb8edca64f9939c93575c99ff9fff72b1cf110195a93fab8ccc22edb6a85c94068d26eba35573fa347cf05ed75c6abe49d0a53d64adf038e85c9a2d83dbbd89564b50c23dc220df1cc9bba404f4581689f1b959a77ca2a99bb120a7d18acc44d9e000d9277f330e342cbfb4bc4859951abba9870d8e72ef1e097b4ff6a9286f1"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x1fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "b95513e03868c3d523160124052c1d810ec92002af94912452da93dd7c49a12b0df09c8ec8c469c9b0b894097c5efb8c9a30c72d9f1377045c57735dad8db90b9f2769babc08af41302b4654617362956879c7b374b37967ff6c867d20c19d7c007c8d611d39bce2243892db9864fee95f174fa633f355e52aba98070ae4d671826b437e8408d435ea0f06f668767cf28bd404679e692d04a2bd25d486a7b99ee1040688f65db3de5e55561ef496a3ac026689babb42a6e5ce19b80ea618"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}]}, {0x1dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "3525c5bc5fbca32eee93f1216778379352cc3e7797328c893db040f57db183d8990f2ead335d94456a1ac58ffc61854f84a25a46626db502bee8680ba213bb3868a799389f6c9b5169a772d692e92bdcf21942591aa27eb8da7e7b66539f7abdbda0744cdb32847367bbdc185f24dc1c30ccad8cd8b8223b5909207e4e52451e5c805b9850b66979f654ace76ba3d9f1b2a7f3f0ac234df5326f08e3ba4167934ff8aa"}, @NFTA_SET_ELEM_DATA={0xd0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa3, 0x1, "78f33f71eb90f83cd61f24e66875ffe24d5f91758baaee6a3dea7d4f83a98e4b5184cadaa967d92d3d6446392f1c200e61af5e22bd73fd8dc7b2ee9763d343ec2312d121c461cc71d19d5345c109b42dcf7b906e93fa73d491ce5cce6d0a6c55d7b308eca8028bb14fe53cf842fb3f244192ef220ee59c216a68811be994297f065e4dc35df5f7feda54997c4588ebb4e6455844280064d56402223c7c53f1"}]}, @NFTA_SET_ELEM_KEY={0x54, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffff3bf2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffeffff}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_DATA={0x250, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x61, 0x1, "6fd5be7aa38567f08e57cae208470ababe866e5e9af33ab107e02e2333f98bcfbedec08cf4669c7ff8a05c14eedb5ab0b80bc668893f3181bfce1a5be21692abe940a535c1364c592944858ff6d29000331e8eea0c0b15a4e4a393c4f7"}, @NFTA_DATA_VALUE={0x88, 0x1, "3884b59a79a285b7573254286e8a96b9f2958b923d8c9d284ce06921ff92ff210b14dfeff7cdb68ef073a3d132b15a485869b910ad2951dbdcf310047972abac94dc9323113ba15853b19c535baf695bd5798a07175bdfa3b8faef560b471366f0f7270cfab3ddcc61ed34ca2a2e4e64e5bfb49096b04c67a26fe15ce6a936fd553643b6"}, @NFTA_DATA_VALUE={0xc3, 0x1, "14e7efa09256d7cc334bacbd048ec0a590b29393d688e4a341fb3c6346895c196fb5082c0f4db2ba1571f7e9ca2eea07efaf80b9a0d4ceef107ee49f721e18a0837d355d09304457ce10035925ddc05b270a76d1c66d75c7acfda47f4d95cd497a7965efd664b807e3faae259b1523e33b9499b560ed0a7a7b9f0f18b9356121c5614e0f4a623740715e9c0454d49d932b9723aeaed84ce1b79978d9ad0791cdfc52b62811058058d83ce5eecc90e389efe8591d66418eb1ade11012ffb6de"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x90}]}, {0xe4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "b6cd6c2a9da8f54bbe4eb54da7a9000f54e695e5636082f40c8c5c2f24940a40c4d134c22a1cd6e2a8f8e6ddb9b9dc0f0b6aeb2542a41b77a7100a4c1b"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x40, 0x1, "6168c378eedc4f2f7517628c12395946f409eaa860a73cf6ce47c7b6a5316629745c86b619f01b77ac514e99c652c5b4a5c3add242d381e2ee8fe9d9"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd2, 0x1, "dc8963dfd5e1433e187bc01e779f0722d23fea8de4f79b20b7867ec63e91545dfafc4344f92871c0f0939ace17d17220790cb39b0c5c3a96c0a04e375444bc699d4389b265674ad29358b3fc813e04c6823a4ebda9ed0488cc10f8accad257ae0b7e99eeef5d501799ac47abc96db5bc04f788600b1caf66bd5334db850c1a6eaef3f3f1ae997b99cc190e5e7eecd8e2f3295d152e26aee1497b1a21c4eb8364ae159ceade0f8ab7b9a6dcc1526421c696125a864eabb05457023e983fc14ab3a57b65b6cbc938d56a7fe906e473"}]}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x62f}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f8f3db8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELRULE={0x179c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8833}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}]}, @NFTA_RULE_EXPRESSIONS={0x16d4, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@dup={{0x8, 0x1, 'dup\x00'}, @void}]}, {0x48, 0x1, 0x0, 0x1, [@objref={{0xb, 0x1, 'objref\x00'}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}, @masq={{0x9, 0x1, 'masq\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xb}]}}]}, {0x3fc, 0x1, 0x0, 0x1, [@meta={{0x9, 0x1, 'meta\x00'}, @void}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x4}}, @osf={{0x8, 0x1, 'osf\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}, @range={{0xa, 0x1, 'range\x00'}, @val={0x350, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x32c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x94, 0x1, "251027c3d660e8cb8a027519f7ef522d166a56d6b4e7962af55a3f7db3757c3964f53aa11bfa690806435daad64eee4529a0de0e97752754691bb3e4c76adf798b2384c912b916d25c9ffb7e9756b86c34193fc78ab2ecd30131e2a1932bff797f3ccfa479c3c5768b9b80d4eeb7c5de3281be54528c44a2eca59a8a8edcf8709f6984bd887fd18b6d991efd5c767f1a"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x55, 0x1, "1591d2de9cbdb2204777c240028aa56f7f74233c8c8d2305681c9b6690c6bbe8882f19c3f8d30fda3f3974fd7d1cc8d2c2748e950a44be26268f920dbe9d20a5465aa730dee9504e05807ec050727a5a48"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd7, 0x1, "8e02d97a2898570aa0e1401215a6ef37be9307e1046b8de2840d0db2bf100b5fa69e7750ca3f2823b26c26cb0f48e210f36298eff55ea8b1d0dd24b448bdfe83fe7444be609623c9835ba139c99ef6ad2c5ac759d1dfee93388b929088a65c901bc3f6c6ccb8d5aea6d8596f8c5fe4e9634f7df7dc20de8c87b45d1ace29a9fa07b098b7e472a206df00ebcdfa48baaf7aab78708fc6245f0c6a439671b3de41a1616f84c4d40c8b2e0eb94fd6833496ddf82fd9cbaba1850689bb08c52055605f8a4a1c3836c31255418a8005b4d43e17c81f"}, @NFTA_DATA_VALUE={0xef, 0x1, "5497ff29641ee38915c48a95bfd19ad47a34902794f213407d27ffa4e7b41687d9ef24238c7668a268fe6954e4b0548d60b6b5523568f0ab32717261a77307825b91098b51fb9b2538779b136268392314321eda83e76c4771287ac5e3361775df829021e5fdcaa61d58f22f73121d2e094219efe9d9f9ed077a871c0b6c71b8c8854117d8356bd580c3e20db5a65973b217b51551b816a6ee2095c14b4f2b67120d73ae53e996d53750afda7db40a8c00339aea72a36dbf7d3b3338b86059cbbe326c8c4f9a46f41d981d0b195401577c09ad1a2e3c5e132cce08a2c230820a496073786e34396970fafa"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}, @log={{0x8, 0x1, 'log\x00'}, @void}]}, {0x28, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}]}}]}, {0x11fc, 0x1, 0x0, 0x1, [@ct={{0x7, 0x1, 'ct\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}, @socket={{0xb, 0x1, 'socket\x00'}, @void}, @hash={{0x9, 0x1, 'hash\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x59c}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x4}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x6c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x60, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x10fc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_DATA={0x10e8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "894fbcf0d346233b588f6d3725b279d6a84b81baa14d9a689a6d39e34b937a9868e40266ece3a2352d7678752ab6d4bb3f999f3e5aad8df9d0dc9704ce0c02e3e11a1dff02b95c0bfa516057ba20a05d8e2acaa46531e2e3a95d8b58a836cd3aac3aaf0fd540eed246649e841fa352203fa3a022e30b8d6546419fb4e711a3d7e968d66640bdf32dd0da964254ce06c69eb89b9939322f26f758bd2206bad5bdf43ee173cb6f0b4ebb9748b6adc6391e7f1090385a1703391bd68bca5ec1ed3a117f0111bd"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}]}, {0x58, 0x1, 0x0, 0x1, [@synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xd4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7f}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x55}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}}]}, {0x4}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x76a0}, 0x1, 0x0, 0x0, 0x4000}, 0x404c855) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000fffff0000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000435fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000b20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300400000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 518.686986][T29901] binder: BINDER_SET_CONTEXT_MGR already set [ 518.693147][T29901] binder: 29899:29901 ioctl 40046207 0 returned -16 [ 518.730027][T29901] binder: 29899:29901 unknown command 353029 [ 518.748866][T29901] binder: 29899:29901 ioctl c0306201 20000200 returned -22 [ 518.768882][T29901] binder: BINDER_SET_CONTEXT_MGR already set 05:26:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000200000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 518.782945][T29901] binder: 29899:29901 ioctl 40046207 0 returned -16 [ 518.806881][T29901] binder: 29899:29901 ioctl 8982 20000140 returned -22 05:26:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300a00000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000010000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 518.847279][T29901] binder_alloc: 29899: binder_alloc_buf, no vma [ 518.903436][T29914] binder: BINDER_SET_CONTEXT_MGR already set [ 518.927487][T29914] binder: 29899:29914 ioctl 40046207 0 returned -16 05:26:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000535fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 518.953194][T29920] binder: 29899:29920 unknown command 353029 [ 518.993641][T29914] binder: BINDER_SET_CONTEXT_MGR already set 05:26:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300e00000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000300000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 519.061978][T29922] binder: 29899:29922 ioctl 8982 20000140 returned -22 [ 519.063802][T29914] binder: 29899:29914 ioctl 40046207 0 returned -16 [ 519.077227][T29901] binder: 29899:29901 ioctl c0306201 20000100 returned -14 [ 519.083716][T29920] binder: 29899:29920 ioctl c0306201 20000200 returned -22 05:26:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x113080, 0x0) getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x20) 05:26:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a301400000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000020000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000400000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000635fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:45 executing program 2: r0 = openat$snapshot(0xffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000500000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a306000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)={0x3c, r2, 0x401, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "250fbf9215a7b6c449ac754ab00b217f30617ec774ac50a10e3fb0eb7ba19f1d2b"}]}, 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x0, 0x2) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d65138cf6c0000000000000000000000dcd527299e0e7dd13e0bca63b365fc6db37a149c3cd3b0583b9e9292a3ce48a8d8d47ec4967f092a23848fcc29f8c9f096f8c2f43fe9d1396fb34e0fb738207feebce5459f77dd50d61be6d9bf45f4ddf4a51b4efc453d1deabb89b87c759b66ec9d7f60fb89fe"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 05:26:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000735fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000600000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30f000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000030000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 519.700930][T29957] __nla_validate_parse: 2 callbacks suppressed [ 519.700940][T29957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 519.750230][T29964] batman_adv: batadv0: Adding interface: veth9 [ 519.758389][T29964] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.802183][T29964] batman_adv: batadv0: Not using interface veth9 (retrying later): interface not active [ 519.824844][T29957] batman_adv: batadv0: Removing interface: veth9 05:26:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30b202000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000700000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000835fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000040000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300003000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000800000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:46 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000935fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 520.267231][T29964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000a000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000900000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000a0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a35fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88000}, 0x4805) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x15, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000000063404001", @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYPTR64, @ANYRES64, @ANYRESOCT]], 0x0, 0x0, 0x0}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05638078000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) 05:26:47 executing program 3: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x8, 0x6, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x4) r0 = openat$pfkey(0xffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x490602, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="e808c800"], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200)={0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000240)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000280)={r6, r7, 0x6}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x2, 0x4) [ 520.788629][T30020] binder: 30015:30020 ioctl c010640b 20000200 returned -22 [ 520.824589][T30022] binder: BINDER_SET_CONTEXT_MGR already set 05:26:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000e000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000a00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 520.844730][T30023] binder: 30015:30023 ioctl c010640b 20000200 returned -22 [ 520.860813][T30022] binder: 30021:30022 ioctl 40046207 0 returned -16 05:26:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b35fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) splice(r5, &(0x7f0000000100), r4, 0x0, 0x800000a, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0185649, &(0x7f0000000100)={0x9c0000, 0x3, 0x3d3, r4, 0x0, &(0x7f0000000080)={0x980910, 0x4b5a, [], @string=&(0x7f0000000040)}}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000240)=0x4, 0x4) ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000140)={0x80}) [ 520.886776][T30027] binder: 30021:30027 ioctl 5457 20000180 returned -22 [ 520.914636][T30022] binder: 30021:30022 ioctl 400454cb 1 returned -22 05:26:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000e0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 520.963937][T30027] binder: BINDER_SET_CONTEXT_MGR already set [ 520.970002][T30027] binder: 30021:30027 ioctl 40046207 0 returned -16 [ 520.984371][T30022] binder: 30021:30022 unknown command 2021679877 [ 520.996585][T30035] binder: 30021:30035 ioctl 5457 20000180 returned -22 05:26:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300014000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 521.032365][T30022] binder: 30021:30022 ioctl c0306201 20000280 returned -22 05:26:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000b00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630460000009000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16], 0x29, 0x0, &(0x7f0000000240)="7ab9dc6d6b6c0a37920d64da33554cb74df752e7e1ed9251a8dda8ee9b6f6a26705901757b7d795823"}) ioctl$BLKGETSIZE64(r2, 0x80041272, &(0x7f0000000000)) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000140)=0x1ff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c35fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 521.107266][T30040] binder_alloc: 30038: binder_alloc_buf, no vma [ 521.155885][T30040] binder: 30038:30040 ioctl c0185649 20000100 returned -22 05:26:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30003f000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000c00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 521.226184][T30051] binder: 30047:30051 unknown command 1610900229 [ 521.253842][T30051] binder: 30047:30051 ioctl c0306201 20000280 returned -22 05:26:47 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000140000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x9, r1, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x9, r2, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 521.282228][T30055] binder: 30047:30055 unknown command 65535 05:26:47 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d35fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 521.329586][T30058] binder: 30047:30058 ioctl 80041272 20000000 returned -22 [ 521.349758][T30055] binder: 30047:30055 ioctl c0306201 20000180 returned -22 [ 521.366043][T30051] binder: BINDER_SET_CONTEXT_MGR already set 05:26:47 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300060000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 521.378911][T30051] binder: 30047:30051 ioctl 40046207 0 returned -16 [ 521.409472][T30051] binder: BINDER_SET_CONTEXT_MGR already set [ 521.422780][T30051] binder: 30047:30051 ioctl 40046207 0 returned -16 05:26:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000e00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 521.475548][T30051] binder: BINDER_SET_CONTEXT_MGR already set [ 521.478310][T30071] binder: 30047:30071 unknown command 1610900229 [ 521.515302][T30051] binder: 30047:30051 ioctl 40046207 0 returned -16 05:26:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x9, r1, 0xfffffffffffffffb) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0xaa, 0x0, &(0x7f0000000300)="0376569c31ad658e217b7c91f29b8d0ea72c3e5d7b291cb2dd71aca441f80c0190c568c2c0beeffb5ec8c5382243595f27a2c0ea9913e3bf95aeaa08dda21234ec1e8246ea4a2e65aef0b5fefba39e42a44a9df2ab522eea5537123aaeee5720d6899f8a7e8ceaeb4b3bd200d655e3e8fe752533da6efa80e686ec09c30a7237f254bccfb6dc06265c702577a8f3df41458763f2cce3493e44bf1bc0998a2fd5e9d7afbd636f850de7ac"}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) keyctl$get_keyring_id(0x0, r1, 0x10000) 05:26:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e35fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 521.522688][T30058] binder: 30047:30058 ioctl 80041272 20000000 returned -22 [ 521.522695][T30055] binder: 30047:30055 unknown command 65535 [ 521.522712][T30055] binder: 30047:30055 ioctl c0306201 20000180 returned -22 [ 521.560622][T30071] binder: 30047:30071 ioctl c0306201 20000280 returned -22 [ 521.565996][T30077] binder: BINDER_SET_CONTEXT_MGR already set 05:26:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3002b2000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 521.631284][T30077] binder: 30047:30077 ioctl 40046207 0 returned -16 [ 521.675361][T30081] binder_alloc: 30080: binder_alloc_buf, no vma [ 521.692127][T30081] binder: 30080:30081 ioctl c06c4124 200001c0 returned -22 05:26:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xc}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d65138cf6c0000000000000000000000dcd527299e0e7dd13e0bca63b365fc6db37a149c3cd3b0583b9e9292a3ce48a8d8d47ec4967f092a23848fcc29f8c9f096f8c2f43fe9d1396fb34e0fb738207feebce5459f77dd50d61be6d9bf45f4ddf4a51b4efc453d1deabb89b87c759b66ec9d7f60fb89fe"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000000000000fe0000", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@mcast1, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xafec, 0x2, 0x6, 0x100, 0x9, 0x0, r8}) 05:26:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000001400000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000008ed16b580000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f35fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 521.733266][T30085] binder_alloc: 30080: binder_alloc_buf, no vma [ 521.762134][T30085] binder: 30080:30085 ioctl c06c4124 200001c0 returned -22 05:26:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000f0000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:48 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000023404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40920100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup2(r5, r6) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 521.877207][T30094] binder_alloc: 30092: binder_alloc_buf, no vma 05:26:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000001900000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 521.918769][T30094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 521.976292][T30103] binder: BINDER_SET_CONTEXT_MGR already set [ 522.006421][T30104] batman_adv: batadv0: Adding interface: veth9 05:26:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300040030008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:48 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001035fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:48 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000600000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 522.012722][T30104] batman_adv: batadv0: The MTU of interface veth9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.033851][T30103] binder: 30100:30103 ioctl 40046207 0 returned -16 [ 522.052635][T30112] binder: 30100:30112 ioctl ae01 0 returned -22 [ 522.063648][T30113] binder: 30092:30113 ioctl 890b 20000100 returned -22 05:26:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000004c00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 522.133226][T30115] binder: BINDER_SET_CONTEXT_MGR already set [ 522.141239][T30118] binder: 30100:30118 ioctl ae01 0 returned -22 [ 522.150792][T30104] batman_adv: batadv0: Not using interface veth9 (retrying later): interface not active [ 522.165467][T30115] binder: 30100:30115 ioctl 40046207 0 returned -16 05:26:48 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300003400008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 522.192034][T30094] batman_adv: batadv0: Removing interface: veth9 05:26:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_DELRULE={0x344, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2e4, 0x4, 0x0, 0x1, [{0xa8, 0x1, 0x0, 0x1, [@flow_offload={{0x11, 0x1, 'flow_offload\x00'}, @void}, @xfrm={{0x9, 0x1, 'xfrm\x00'}, @void}, @osf={{0x8, 0x1, 'osf\x00'}, @void}, @numgen={{0xb, 0x1, 'numgen\x00'}, @void}, @ct={{0x7, 0x1, 'ct\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}]}}, @immediate={{0xe, 0x1, 'immediate\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}, @connlimit={{0xe, 0x1, 'connlimit\x00'}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}, @quota={{0xa, 0x1, 'quota\x00'}, @void}]}, {0x238, 0x1, 0x0, 0x1, [@notrack={{0xc, 0x1, 'notrack\x00'}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", "", ""]}}, @range={{0xa, 0x1, 'range\x00'}, @val={0x190, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x140, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}]}, @NFTA_DATA_VALUE={0xae, 0x1, "3e1cea9d2ef3ebfb3968169c3ca2c5d98d4bac4f9fdc0cdc5fdb52db430e4b53ef9c66d4faa60503611324d0634cac6531967d40aad7e9245045341ecae5117670c951bfba36fc70c6a125f012223829ae416afea9ef409dd84e945c0bc6c775480067aa0ba8db96a8391f653dda90065e6a76dc1fdec252e5438aa24b8f28bb22065dd73a917069f0c50163c7d00b952c93b926a954d77e3994fac6b9cbc7bbcb740293a309560e0c04"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_RANGE_TO_DATA={0x4c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x46, 0x1, "474bc849903bddd429e72d7a3176f00a876e690e0bfbdb5c7ef7bef724fdf890dc42dc741098dbc39500a31a5b326d1dd021d803d25be4c5576210c3fca81ea4ad11"}]}]}}, @target={{0xb, 0x1, 'target\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @void}, @bitwise={{0xc, 0x1, 'bitwise\x00'}, @void}, @log={{0x8, 0x1, 'log\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x6}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '-\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x2}]}}, @reject={{0xb, 0x1, 'reject\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb3}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}]}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x4c, 0x8, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}], {0x14}}, 0x448}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000006000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000036fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000586bd18e0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30fffff00008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 522.619502][T30104] binder: BINDER_SET_CONTEXT_MGR already set [ 522.632116][T30104] binder: 30092:30104 ioctl 40046207 0 returned -16 [ 522.641228][T30113] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$ttyS3(0xffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x8800, 0x0) fstatfs(r4, &(0x7f0000000180)=""/47) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x15c, 0x0, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffe00}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfd}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5ea}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6316}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3963}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x298b}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xb8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x3e2b}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48080}, 0x8000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000008200606f106010100e6e281147ba7c3330bcca3e011000000000000000000000005000159fe0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) [ 522.774670][T30151] binder_alloc: 30147: binder_alloc_buf, no vma 05:26:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000006c00000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000136fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000108000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 522.851139][T30156] binder_alloc: 30147: binder_alloc_buf, no vma 05:26:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000ffffff9e0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x18900, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0445611, &(0x7f0000000300)={0x970, 0x8, 0x4, 0x0, 0x4, {0x77359400}, {0x1, 0x0, 0x4, 0x81, 0x1f, 0xf8, "9da39048"}, 0x8, 0x2, @planes=&(0x7f0000000240)={0x1f, 0x467889c1, @fd=r3, 0x1000}, 0x1000, 0x0, r2}) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1f4, 0x1, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_PAYLOAD={0x98, 0xa, "bee18252b99c4a4524f93c1d3bdfc3b1a54f474a2c96911cfcf5c81a628d4d5c6c48bdf0260eb4b8ea5fbb426d9258c849bfa3576ba06f780c1f2846c1fbaa430bd399717676732de662f4efc3dad43709371c441f46394054ab7474a3f0f551c65eb7c5ca65966edb93e2c367629e09b8db8b5364c2cd27e5901350ffd10d1f5a3cc34c37c6295f3a49b588fa445535f8ea2243"}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6}]}, @NFQA_PAYLOAD={0xd2, 0xa, "4042fde40a2a6e318051bdef8c6bf17ab564cf6556088615697b2982861ff19222bb9e9096da5c24642b830d2032e16b804663a05f7c6543a6348e4dc854c4f246aeb0b3dfaeeeb818f926effef83e5db2a6f07dcf49406b45057afbb275c1f2bb842dd5fb3742edeadb9fe49e4eb7c945df98ad2ca0a6d9e936e946f86a97336b3a5a7dffd9b39e8a04eea4fbde37ebb2410c6d5f0da9a87e84822fc74713566d2132bebcf4ff9dbfea23d11338e1a2d11bed691e61e141f12604130079a2f3ef0becbde6e273612d969d2f2dcb"}, @NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0x2f, 0xa, "b05def20c9cf1639dcfbef9db6b4304a37bf961416c0e59af6d78bc5aec5ad00a076feb000154e212e7044"}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$IOC_PR_REGISTER(r4, 0x401870c8, &(0x7f0000000000)={0x7f, 0xfffffffffffffffd, 0x1}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000100)={0x800, 0x3, "4de13564d6716e4c18a38901e7aed5e3b9306fc4bd2997a7799479a81909d9d7", 0x0, 0x4, 0x3, 0x5, 0x8}) 05:26:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000208000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000f000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup2(r4, r3) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04200000"], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') write$ppp(0xffffffffffffffff, &(0x7f0000000400)="0ad7ebe7f3d7860cc418c6f57b53172448c0cf5d85e6ffca1530024c0a8de1aadf25d15c8c98d3e969d765258ec02f7cd5b599f7a1981c049d37ea5dfee34ee2ca674e6522b3e41a06412698a9c3c114513132a4655dca9bf182cb5162adeb1203ac2931d500efe1727a9f4850f43574e14b3176e4fcf5c9bdaea8dcb1950593e202959a10f8c0aa4733bff28cc52104a7afcffab94754a018915f7ef8ef7de442afaff37bb062625cf23d9eb4e6d067e046ad273ce39abd637e6eb9ca11357edfce90986a7e3341b9", 0xc9) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8081400}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x44, r6, 0x5, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x31e}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x1}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7f}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x30}}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3ba}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, &(0x7f0000000000)={0x29, 0x1}) [ 523.028542][T30173] binder_alloc: 30172: binder_alloc_buf, no vma [ 523.066263][T30173] binder: 30172:30173 ioctl 401870c8 20000000 returned -22 05:26:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000236fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 523.217724][T30188] binder: BINDER_SET_CONTEXT_MGR already set [ 523.225122][T30188] binder: 30184:30188 ioctl 40046207 0 returned -16 [ 523.243891][T30188] binder: 30184:30188 unknown command 8196 05:26:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000003000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000fffffff00000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000308000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 523.266753][T30188] binder: 30184:30188 ioctl c0306201 20000200 returned -22 [ 523.341406][T30188] binder: 30184:30188 ioctl 4008744b 20000000 returned -22 05:26:49 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000336fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0445609, &(0x7f0000000100)={0x9, 0xb, 0x4, 0x10000, 0xfffffff7, {}, {0x2, 0x8, 0x7f, 0x5, 0x1, 0x9, "c2174ff6"}, 0x3, 0x1, @planes=&(0x7f0000000000)={0x0, 0xfffffff8, @userptr=0x2, 0x7f}, 0x8}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000008060101000000000000000000f5ffff040001002104dd606260f8af2075777115bdc73a705b6ab2e682b34e6a206fb42e5aec6c003ff97856238b15f37d785fb69fafbf4177a17948311d2e731dd4ead31dffe075bcd5cb594e2eaca3c73f8349bab0a385aae31e17042b1f98e75a214044aa620c4739985d6721917078070937"], 0x28}}, 0x0) [ 523.389898][T30188] binder: 30184:30188 unknown command 8196 [ 523.416948][T30188] binder: 30184:30188 ioctl c0306201 20000200 returned -22 05:26:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000408000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000005000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002480)='./file0\x00', 0x0, 0x143) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000000)=0xc000000000, 0x8) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000024c0)=0x1ff, 0x4) 05:26:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000f0ffff0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000436fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 523.556182][T30208] binder_alloc: 30205: binder_alloc_buf, no vma [ 523.587524][T30208] binder: 30205:30208 ioctl c0445609 20000100 returned -22 05:26:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000a08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 523.616534][T30208] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 523.642464][T30214] binder_alloc: 30213: binder_alloc_buf, no vma 05:26:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000006000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 523.671360][T30208] binder_alloc: 30205: binder_alloc_buf, no vma [ 523.680644][T30218] binder: 30205:30218 ioctl c0445609 20000100 returned -22 [ 523.687024][T30220] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 05:26:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000536fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 523.717927][T30223] binder: BINDER_SET_CONTEXT_MGR already set [ 523.753331][T30223] binder: 30213:30223 ioctl 40046207 0 returned -16 05:26:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000007000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000e08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000200)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x4) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1], 0x2}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 05:26:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000007fffffff0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = socket(0xa, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x2}, 0x10) write(r4, &(0x7f00000000c0)="240000001a005f0014f9f407000904000a00000000000000000000000800010000000000", 0x24) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000100)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xd490010}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4c051}, 0x40040) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x4000805) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xb0, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x40}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x7}]}]}, 0xb0}}, 0x8010) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xe2) ioctl$PIO_UNIMAPCLR(r4, 0x4b68, &(0x7f0000000180)={0xee, 0xfff7, 0xf1}) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="edff0f415e66132fbcb5ebc14c24933dec5e0634142ed706cc4b26953160435fc8301ed500"/50], 0x0, 0x0, 0x0}) r6 = dup2(r5, r1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) 05:26:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000006608000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000001408000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 524.030353][T30241] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000636fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 524.126727][T30249] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 524.145767][T30253] binder: 30247:30253 unknown command 0 05:26:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x19, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRESOCT=r0], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0163404087ab65d6689e7ee13ab560ffdbb5c29125dd1654769e45b0d63c71caf97e92b64cf81e8664248bd6fe962b12c1c803c512ac869e"], 0x1, 0x0, &(0x7f00000002c0)='s'}) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000200)=""/242, 0xff}, {&(0x7f0000000300)=""/106, 0xffffffffffffffa7}], 0x4}, 0x40002002) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x8000) [ 524.178918][T30253] binder: 30247:30253 ioctl c0306201 20000200 returned -22 05:26:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000736fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000009effffff0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000003f08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:50 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000009000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) [ 524.354946][T30266] binder: 30265:30266 ioctl c0306201 20000200 returned -14 [ 524.384521][T30266] binder: 30265:30266 ioctl c0306201 20000280 returned -14 [ 524.411129][T30266] binder: 30265:30266 ioctl c0306201 20000100 returned -14 05:26:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000836fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000006008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000a000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 524.493768][T30266] binder: 30265:30266 ioctl c0306201 20000280 returned -14 [ 524.494205][T30276] binder: 30265:30276 ioctl c0306201 20000100 returned -14 05:26:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000f0ffffff0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x0, 0x3ff, 0x5, 0x9, 0xdf}) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) write$P9_RFLUSH(r1, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) 05:26:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000b000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000936fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30ffffff9e08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="016340d2"], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0185649, &(0x7f0000000300)={0x70000, 0xffff, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xa2093d, 0x1ff, [], @value=0x401}}) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000226bd7000fbdbdf25010001000000"], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x801) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') ioctl$TIOCSCTTY(r2, 0x540e, 0xffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xec03}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="1910b9694f159a1486cbf7892b114678"}, @SEG6_ATTR_SECRET={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:51 executing program 3: r0 = openat$autofs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) [ 524.812255][T30299] binder_alloc: 30296: binder_alloc_buf, no vma 05:26:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000003400008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000002b208000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 524.875497][T30305] binder: 30296:30305 unknown command -767532287 [ 524.904402][T30299] binder: 30296:30299 ioctl c0185649 20000300 returned -22 05:26:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 524.927740][T30305] binder: 30296:30305 ioctl c0306201 20000100 returned -22 [ 524.965941][T30299] binder: 30296:30299 ioctl 540e ffff returned -22 05:26:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvram(0xffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x10000, 0x0) fgetxattr(r1, &(0x7f0000000140)=@random={'security.', '\x00'}, &(0x7f0000000200)=""/108, 0x6c) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x448100, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40042406, &(0x7f0000000080)='syz0\x00') [ 525.033661][T30299] binder: BINDER_SET_CONTEXT_MGR already set [ 525.042014][T30315] binder: 30296:30315 ioctl c0185649 20000300 returned -22 [ 525.050868][T30299] binder: 30296:30299 ioctl 40046207 0 returned -16 05:26:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a36fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000e000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 525.084815][T30315] binder: 30296:30315 ioctl 540e ffff returned -22 05:26:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30fffffff008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000005000107d0fc57c8", @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) 05:26:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000fffffffffffff00008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x20040800) 05:26:51 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000014000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:51 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b36fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000f0ffff08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:51 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601000000000000000000050001000700000000000000"], 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xe4, 0x464, 0x800, 0x70bd26, 0x25dfdbfc, "9a117a7161c50e2a1a6d2007f2ff8fc7d563906effa1d843d491d36d7df13b319c049199197dd9313e670de52b7d233193ecdcebc280b6b940eb99fe87981b062f2db6749af7f4b85d4ae6f7aae66ef84578764f6e5cb64fd4b25bfde775cc4b2fd0bd904a5b4b452b4f5ec3b86ebb263a59df3d8c1eeb603e367f971f86dc047592cab4b209662913755aa7c9d168a8d5d3991e480f45b07f30469a3e194ae2dbf311cdf26e3410a1fdf92889cf6597aa6c05a2a6a12a67a91f1fc523d802ff21a987a3be410ffb6388e1d5115fca653c", [""]}, 0xe4}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 05:26:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000108000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000180)={0x6, 'netpci0\x00', {0x1}, 0xff27}) recvfrom$unix(r2, &(0x7f0000000100)=""/81, 0x51, 0x10060, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000300)={0x5c0, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf7, 0x7, 0x1, 0x0, "a7513928f04c50306dd25ab9db0ef2cb68484a96455322f10f40d1f50b3d009289d9fab70890126e4bea9529a575888f4c3153358663f815465ebe9313ccea461563c49f9d75147759fa999c1dfe5d9ccd2c24f6cd8e9690cbd6ccbbcf06b5fe7f8b46afa0fe8958437bd79e1feab27554a4f26deae6e50f8cf9f4c3f9987cc273ea30c83a7fc6e2b33d5191c4fc3889bd0f0b6e81408c619e930c44b494ab554e19ab1a78150d706fdda465fafb90b420a137ed14722db0b0801ac7ce529bcef12766c5cea0f2a2978e52b7cdcdda3b4fe90945f664f3dc4a97c17ee3aad5ccd2f153d34517853dbc558b1ba527feed7321c1"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x490, 0x4, 0x0, 0x1, [{0x3c4, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @cmp={{0x8, 0x1, 'cmp\x00'}, @val={0x1f4, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc4, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "02565f027cabf4557109e24c8dd6bbdf661886b90a0280a71d5f465f0072a9d9f1324315b50c8ecc679741c8734ca4ead493a56964d15a3350003932b0e1f342735b6cc53bbddcb286be8c12b3cde3feedf246f3fa2fbf57169d9a365286b4335b27d5391af62807d1fbabd986eb9eafcffc7e1d2f6855934752e7413dbe4271bc1c7817ca17de7633db6407651f86649dbbf2e1bd2708b67bdf54ce091f3c8135732d7b3b56ee577bb8710d87a855f5e29414d344f959090ddf"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_DATA={0xec, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7b, 0x1, "00cc9a21f6d7ba6d56ea30844277e8d9869604d1ae4809f925d42f41595790b157f43fcb6ea43c17f0a000a59a7aa6a95b8d824b04784a85898928d138177a7bdef6d82cd9021a1c32c0ac9d330d18968e94b0587bfb187944411537033a00b563549d2cc02c816b3beb3a4384048c52ac47843a26b73e"}, @NFTA_DATA_VALUE={0x68, 0x1, "8e26e8a7133c2e57a182e10f3131ef71c4b17a93313801d491447c322b5283ac94f4c4858195534d9565ec2234fc85bfb72e8d76666be6612b9ac2e0c879245f3ded1c02a65c3997f342753fa80057a142bab198a386ba4199e9b53321ebb9f38f52ba90"}, @NFTA_DATA_VERDICT={0x4}]}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x80}]}}, @ct={{0x7, 0x1, 'ct\x00'}, @void}, @range={{0xa, 0x1, 'range\x00'}, @val={0x154, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x140, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "7391c22849286389a070e13d2f36db7f91cafa1f3a83e21e14aab49d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xc4, 0x1, "13f76d167ce7be00882240f1d2ffdb6abe5ee6a98cb5d0346feae799f8da65ff91b7c0ca6e80b8ee8cfdaaebd9c7fe86712603a8e1fb45ce9ae5599aff28b007a1b4643e2afb9a4e020f1d0e8a570c0531b093dc91be45ff18b4dbe8618e13fdc44abd35a5075a39b5755130b3b891c15ebc0fd95244b52f4c48cd81f7b7ae6fd2a2d8be9be253f7a284606718ed17b4e8eacc0aea195b25323d6603ed0ee9b251f7448bd7ac5dc8fea0945e657c661207a315059f3102e91fa4428f86392f00"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}]}, {0x2c, 0x1, 0x0, 0x1, [@target={{0xb, 0x1, 'target\x00'}, @void}, @nat={{0x8, 0x1, 'nat\x00'}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x12}]}}]}, {0x18, 0x1, 0x0, 0x1, [@dup_ipv6={{0x8, 0x1, 'dup\x00'}, @void}, @reject={{0xb, 0x1, 'reject\x00'}, @void}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@payload={{0xc, 0x1, 'payload\x00'}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffb}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x60000000}]}}]}, {0x54, 0x1, 0x0, 0x1, [@tproxy={{0xb, 0x1, 'tproxy\x00'}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x11}]}}, @synproxy={{0xd, 0x1, 'synproxy\x00'}, @void}, @rt={{0x7, 0x1, 'rt\x00'}, @void}]}]}]}, 0x5c0}, 0x1, 0x0, 0x0, 0xc8884}, 0x800) 05:26:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000019000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a307fffffff08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 525.562505][T30345] binder: 30344:30345 ioctl c0306201 20000100 returned -14 05:26:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c36fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 525.658307][T30350] binder: BINDER_SET_CONTEXT_MGR already set 05:26:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x1f, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="54220440", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESHEX, @ANYRESOCT, @ANYRESDEC], @ANYRESOCT=r0], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES16, @ANYRESHEX, @ANYRESHEX=r1, @ANYRESHEX=r3, @ANYPTR64]], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="16"], 0x1, 0x0, &(0x7f00000002c0)='s'}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', r6}) [ 525.710153][T30350] binder: 30349:30350 ioctl 40046207 0 returned -16 05:26:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000208000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a309effffff08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="747b48a91f081f1b2ee69cefac3a8edd66847ebaac6b33c37637dff2668b3851fd468b8a816b0608e71b9660d843a91f6aa1d8d656fd0342a93aec79c2beaec0f4c2d0eb8a972ba64fc53603a018e796c97ca41a91c94516f62bc1ed6d39058b08b3b2c1ece8abe8d21dbd985edfadb4076aa204c5303d58f46975ae5e3c9fa4f75304e8cc43cf290aa719286a6bed6e726678c7249954310ac0d3b7c78a523908a3d73d0bcbf0a47865f25ab6bc3ededde2c7ef8c42f8290d42199b16e2947832155227eca232fb68610c4b9a757eea8174cf1476be8ea31b327a5092ce3dfb59ed47cde19ced7f71d75af7f029e98b5df976e86a659e53d7", 0xf9, 0xfffffffffffffffb) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$UI_END_FF_UPLOAD(r2, 0x406055c9, &(0x7f0000000100)={0xc, 0x8d490b57, {0x54, 0x9, 0x1ff, {0xa6c, 0x1f}, {0x5, 0x7}, @rumble={0x30, 0x4}}, {0x5, 0x5, 0x1, {0x1ff, 0x3d}, {0xff, 0x7fff}, @cond=[{0x100, 0x2, 0x5, 0x2, 0x101}, {0x6, 0xd5, 0xe2, 0x200, 0x81, 0x7c26}]}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x7ff, 0x40000) ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000440)={0xff, 0x3, 0x3}) [ 525.885750][T30365] binder: 30362:30365 unknown command 1074012756 [ 525.892152][T30365] binder: 30362:30365 ioctl c0306201 200000c0 returned -22 05:26:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d36fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 525.938307][T30368] binder: 30362:30368 ioctl 8933 20000100 returned -22 [ 525.964260][T30371] binder: 30367:30371 ioctl 406055c9 20000100 returned -22 [ 525.985634][T30365] binder: 30362:30365 unknown command 1074012756 [ 526.000192][T30368] binder: 30362:30368 unknown command 20 [ 526.017900][T30365] binder: 30362:30365 ioctl c0306201 200000c0 returned -22 [ 526.033204][T30377] binder: BINDER_SET_CONTEXT_MGR already set [ 526.040487][T30368] binder: 30362:30368 ioctl c0306201 20000100 returned -22 [ 526.053726][T30377] binder: 30367:30377 ioctl 40046207 0 returned -16 05:26:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000060000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30f0ffffff08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 526.080455][T30371] binder: 30367:30371 ioctl 406055c9 20000100 returned -22 05:26:52 executing program 2: openat$kvm(0xffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r0, &(0x7f0000000100)=""/135, 0x87, 0x40010000, &(0x7f0000000200)=@llc={0x1a, 0x30f, 0x1, 0x5, 0x7, 0x0, @remote}, 0x80) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4000000, 0x80080) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e, 0x10, r1, 0x1b000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000080601ff00050001cf81de937570fdf0eb440007000000"], 0x1c}}, 0x0) mmap$snddsp_control(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x0, 0x4000010, r1, 0x83000000) 05:26:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYPTR64], 0x0, 0x0, 0x0}) r6 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05630440000000000063404001192c50462f45980ee1e349c3a3d38ae64f095528712800080000ea9afe3496b7d60576977a4246aa099dfa98b3057b8233b3d6b4fb7def8fa08e2e9dd8a3cc94ddceb6735ee9e98ba9df46f31d178542e2e54fca49dcaee55a4420"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0163249c178b973c7d414229e7d41820241a6f24040edb9fbb888bd58e228f7fae7e7d247d450384c8e4074211504d42c916bbaea367adcf21c949804584b9fe2feac8091658422c997c990ddfa6d3abf5957b85da03ac87addbc173d633579156f0fd1927b4e89e8eacf5592b0076a752da391edc115047378f268f52cc9249fce56c570f9c492643213079"], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) chmod(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="c7720000080601050000000000000000000000000500010007f98c89e90000000900020073797a3000000000"], 0x28}}, 0x0) 05:26:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000001000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000308000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:52 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e36fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000866000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 526.326231][T30391] binder: BINDER_SET_CONTEXT_MGR already set [ 526.356039][T30391] binder: 30389:30391 ioctl 40046207 0 returned -16 [ 526.363301][T30396] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 526.376966][T30399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 526.468821][T30392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000003000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000006c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f36fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vsock(0xffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x30001, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x14, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x5}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0xcb, 0x40, @mcast1, 0x1ff}}, @sadb_lifetime={0x4, 0x2, 0x629, 0x0, 0x7, 0x1000}]}, 0xa0}}, 0x40000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000408000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x1) pipe2$9p(&(0x7f0000000180), 0x0) r3 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) splice(r3, &(0x7f0000000100)=0xfffffffffffffffc, r3, 0x0, 0x800000a, 0x8) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) splice(r5, &(0x7f0000000100), r4, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r7, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100), r6, 0x0, 0x800000a, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r0, @ANYRES64=r3, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64, @ANYRES16=r5], @ANYBLOB="3cd6dc2d47df2cc23d4645206d594e6f8be6de8e858b0e833ebee42bc16d90c3d62a44b6c6cb2f817bdbd5745f561030fee609eb3fada75a7c0ca0e820d664407fea9b2918e5f8d9d5308e0cd8b3"], @ANYRES16=r0], @ANYRES64=r5, @ANYRES64=r0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYPTR, @ANYRESHEX=0x0, @ANYBLOB="2b5d484b72fc6280502f65e7c8cf74be7c3e1fe35095af007f51eefe894cf0dcea8f06196088450d2a60feb76ec50a0a1acddc516eb1d209fc453f30a03e45efdc726c1277aa820307e8e15497c53f6a94b804ebd8408405a6acf29d94892a56611533a0c8eeb14b5ac16e58bde876b25b9470dfc009f023d5e28e9a6d975d19f879365b73fbcd7094419823743e8aabb854f74659a1945bcaa0f9f8b7a31197b5ce20a08afe79f3b59b0bc4926723144ae7522ea757cb4f76484a847cf8923cd9142866a71bede410522c99dd07ebee133e58af"], @ANYBLOB="b70a705f13bb4a796d01cffafea9edfd1dfb6c743086ff5ba7e909bb252ede3855d406af0bc3b3add9bd74f28ccaa97cee37c400000000b04f07c13027dcea0c1de42076a22c8a4ec005752b52ecb5bae83903dc78e76fad3a4b814d0cedfc629d2c243d4f905e29665021a6d8f3a10a0286d8cf6e36d8", @ANYRESHEX=r7]], 0x1}}, 0x0) 05:26:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000f0000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 526.651498][T30414] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001036fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300002000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000806010100000000000001000700"/28], 0x1c}}, 0x0) 05:26:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000040030000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 526.832211][T30433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000a08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c804}, 0x40840) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 05:26:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000037fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300003000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$EVIOCGEFFECTS(r3, 0x80044584, &(0x7f0000000200)=""/213) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000003400000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 527.078189][T30444] binder_alloc_new_buf_locked: 6 callbacks suppressed [ 527.078197][T30444] binder_alloc: 30441: binder_alloc_buf, no vma 05:26:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300004000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000fffff00000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 527.126367][T30451] binder_alloc: 30447: binder_alloc_buf, no vma [ 527.163458][T30444] binder: 30441:30444 ioctl 6430 0 returned -22 05:26:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000137fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 527.177375][T30456] binder: 30447:30456 ioctl 80044584 20000200 returned -22 [ 527.187032][T30452] binder: BINDER_SET_CONTEXT_MGR already set [ 527.193784][T30452] binder: 30441:30452 ioctl 40046207 0 returned -16 [ 527.194467][T30459] binder: 30441:30459 ioctl 6430 0 returned -22 [ 527.214661][T30451] binder: 30447:30451 ioctl 894b 20000140 returned -22 05:26:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000e08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 527.243523][T30456] binder: 30447:30456 ioctl 80044584 20000200 returned -22 [ 527.245046][T30463] binder: 30447:30463 ioctl 894b 20000140 returned -22 05:26:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000a000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000100000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000806010100000000005141ef240000000500010007000000566f8c7e440118790be1a10400c5c8d335c80c968a7d774c117fa174deb5fd3fef9f96317f7202617983cacc886b06a505c0c9fc909259225759c78df4b352790300"], 0x1c}}, 0x0) 05:26:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000806e401000000000000003b76008030ff0705000100070000e41300020073d05a30000000006c9f6820ec7a0a2d7ae2532a8602b65b2c4188be9400f54b84e9117674eba369b542f68235d6dfa93b83c40ae4ca1ca328f4d19bf3433d89f1850b488c799875d23581aac5bfca1801b1e0dcea1536176359c7df10fa072edeab1e4fbe7554e0639aa7eabaefffaf42538519411150a1a41a749fce7eaa778d5320f3fb67d9036e05bad3a1125c0200d47c032d4eb643ef9a5919fa926a"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x40, 0x4) 05:26:53 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000237fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000e000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000000)='\x00') 05:26:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000200000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ea630440000000000600000001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @random="89d27721901f"}, 0x10) 05:26:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000001408000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000337fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300014000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 527.639531][T30485] binder_alloc: 30484: binder_alloc_buf, no vma [ 527.675159][T30489] binder: 30486:30489 unknown command 1074029546 [ 527.685635][T30489] binder: 30486:30489 ioctl c0306201 20000280 returned -22 [ 527.703305][T30485] binder: 30484:30485 ioctl 41007701 20000000 returned -22 [ 527.707226][T30489] binder: BINDER_SET_CONTEXT_MGR already set 05:26:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000300000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 527.733728][T30489] binder: 30486:30489 ioctl 40046207 0 returned -16 [ 527.745057][T30492] binder: BINDER_SET_CONTEXT_MGR already set [ 527.751075][T30492] binder: 30484:30492 ioctl 40046207 0 returned -16 [ 527.758339][T30498] binder: 30484:30498 ioctl 41007701 20000000 returned -22 [ 527.779397][T30499] binder: BINDER_SET_CONTEXT_MGR already set 05:26:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300020000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 527.807928][T30503] binder: 30486:30503 unknown command 1074029546 [ 527.826122][T30499] binder: 30486:30499 ioctl 40046207 0 returned -16 [ 527.836638][T30489] binder: BINDER_SET_CONTEXT_MGR already set 05:26:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000008ed16b5808000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 527.856721][T30489] binder: 30486:30489 ioctl 40046207 0 returned -16 [ 527.863625][T30503] binder: 30486:30503 ioctl c0306201 20000280 returned -22 [ 527.866830][T30506] binder: BINDER_SET_CONTEXT_MGR already set 05:26:54 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x40080) 05:26:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000437fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 527.912799][T30489] binder: 30486:30489 ioctl c0306201 20000100 returned -14 [ 527.918454][T30506] binder: 30486:30506 ioctl 40046207 0 returned -16 [ 527.921688][T30499] binder: 30486:30499 ioctl 8933 20000100 returned -22 05:26:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000400000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300060000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xac, 0x4, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6e0}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x51f4}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x79c}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x40004}, 0x4010) socket$rxrpc(0x21, 0x2, 0x8) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="40800000"], 0x1, 0x0, &(0x7f00000002c0)='s'}) getdents(r4, &(0x7f0000000400)=""/125, 0x7d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r6, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r6, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x7, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) setsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1}, 0x8) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 528.042149][T30516] binder_alloc: 30513: binder_alloc_buf, no vma [ 528.110052][T30516] binder_alloc: 30513: binder_alloc_buf, no vma 05:26:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000500000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000f0000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 528.150505][T30527] binder_alloc: 30525: binder_alloc_buf, no vma 05:26:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8c) openat(r1, &(0x7f0000000080)='./file0\x00', 0x400180, 0x0) 05:26:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000537fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000006008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 528.204893][T30529] binder: 30525:30529 unknown command 32832 [ 528.243855][T30527] tipc: Started in network mode 05:26:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000600000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 528.250008][T30527] tipc: Own node identity 7ff, cluster identity 4711 [ 528.264008][T30529] binder: 30525:30529 ioctl c0306201 20000100 returned -22 [ 528.286995][T30527] tipc: 32-bit node address hash set to 7ff 05:26:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000b2020008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 528.328496][T30529] binder_alloc: 30525: binder_alloc_buf, no vma [ 528.353639][T30527] binder: 30525:30527 unknown command 32832 [ 528.360632][T30527] binder: 30525:30527 ioctl c0306201 20000100 returned -22 05:26:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x4, 0x1000, &(0x7f0000000200)="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"}) 05:26:54 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000637fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000700000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000ffffff9e08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, r4, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x2e}}]}, 0x60}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000000)={r7}, 0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={r7, 0x8001}, 0x8) [ 528.765961][T30556] binder_alloc: 30552: binder_alloc_buf, no vma [ 528.789792][T30556] binder: 30552:30556 ioctl 80104592 20000000 returned -22 [ 528.799768][T30558] binder_alloc: 30553: binder_alloc_buf, no vma 05:26:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000800000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000030008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 528.825810][T30563] binder_alloc: 30552: binder_alloc_buf, no vma [ 528.855465][T30563] binder: 30552:30563 ioctl 80104592 20000000 returned -22 05:26:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000737fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$FICLONE(r3, 0x40049409, r2) 05:26:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000fffffff008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:55 executing program 3: openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x800, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) 05:26:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d65138cf6c0000000000000000000000dcd527299e0e7dd13e0bca63b365fc6db37a149c3cd3b0583bb29292a3ce48a8d8d47ec4967f092a23848fcc29f8c9f096f8c2f43fe9d1396fb34e0fb738207feebce5459f81cd50d61be6d9bf45f4ddf4a51b4efc453d1deabb89b87c759b66ec9d02000000fe"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000500", @ANYRES32=r7, @ANYBLOB="000000000000000008000a0014000000"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x8, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 05:26:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000900000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000a0008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000080612e5011aeb01010000000000000000000000000000010007b1ddabab65912aad7f5f"], 0x28}}, 0x0) rt_sigprocmask(0x1, &(0x7f0000000100)={[0x7fffffff, 0xda]}, &(0x7f0000000080), 0x8) socketpair(0x22, 0x806, 0x5, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) splice(r3, &(0x7f0000000100), r2, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) splice(r5, &(0x7f0000000100), r4, 0x0, 0x800000a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000200)="8e533267be1c7953273b2473a6cc387669d5243745d099fb3df22b95084de3ddc0f6e9e0ae2fb085186356831903e70d26404c959f214484828bd07cfd5cce0240f686807d0a7098a05d6e32bf78a9390c1f7bf3ca255d80fbee74", 0x5b}, {&(0x7f0000000000)="810dcd4e92cb7f63a6bc760a5d66072a91cc0b8f9d172f7a0ae11523e94f39f29bd9a88401817432b89eec921acaf6ffb585165d8d95c2e2a543e137424cbc", 0x3f}, {&(0x7f0000000280)="a9053dea5ea4ab43832895af41ecd9269ee1102e0eecfc3089c3bfd289a8f6e13e13cfdcac8dd1a170db5f7d95f587563ea0e41ed2cbf3644511d9b1e961ef066d671a953b819046bd084a4b73d73785e45d26746bd67138ccdf0227432614f770b830d32f52fdc5bf04e8690514ca1204ee6eba7fd234cd80c7314d0a8778d9da3e45bb12c57b020dad3e28a8743ba14294b6edb47a56177f4028a0965419cc75ceac0b", 0xa4}], 0x3, &(0x7f00000003c0)=[@rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r3, r0, r0, r5]}}], 0x28, 0x801}, 0x400c840) 05:26:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000837fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 529.180780][T30589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:55 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000007fffffff08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000a00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000e0008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 529.311481][T30593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 05:26:55 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:55 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000937fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) r5 = openat(r0, &(0x7f0000000740)='./file0\x00', 0x80, 0x4) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r7, 0x0) splice(r7, &(0x7f0000000100), r6, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r9, 0x0) splice(r9, &(0x7f0000000100), r8, 0x0, 0x800000a, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000200)="2aac1a79fb2e3d70dca45009db4473a1acb0576c0a4121a05f6cc9e2651a744b28d29bdcace1d091e44a55d4d8ecbdcc4773996bb03e3ba6f59f65dd44e58f32767babf31623ecc513d0e76a450791fafdb96aeb7f78235db8667511bcb82bec809056a16628c0596946c8377055a153659462ea76228d6c3c42a2524062d7403fe062079b5a869501d64a2b694f9c1d18310fdfa5a29c", 0x97}, {&(0x7f00000002c0)="b9c57925acdf9ef12a6290872b9ca13e79d4d28df9b6b368fca0d4beed6743c64a498b68802de0993d5d28fcfb19341c383fa4ba444047f005ff8974f817812fc7d5422c561b777097279e722fb1c406bdffd332a8fcee9c6bb79e429138463d3cf386f576b2cb5983a06371d6b7654193afbab774a8594677a7f7a17660a51384c9d6ce53d66cc499785f05d64a029cb4557f0c4015afa75029049e2ef7540034bd6bd9cce938504831a604e69484e4d0e7f28ef9e5d96e003e97d3bbc7ca4f", 0xc0}, {&(0x7f0000000380)="64e4be8310a4a2ce1b1a8647941a9c9d7fd05de06a2dfcfdc409504db8cfc95bb58ad900f87f9777fe86c61994c49b527b22ec5fcbff97a3ab154870001734e898f4fd6deefd81bb09dd79bb72a826927cdf1898cf3de8969db1f29d4429149eaeccdc03e7aa8839d688965cc1561c70473d34dc837d100ec148d8a6fe7f54f94226c458ce17f784292bd75cccadc6998ea512818c73343afb1dc08426f7e7297758c248d87f55d70ff69771c57209513b44e37f8264392112d0550810336606d38f32088decd48c5ae7a836783a7d537cda9aa7d822d1f9abaa8c827541ed562817cf5e82e5aee421c42bdfbbf2b49ad6550ce5fd6f", 0xf6}, {&(0x7f0000000480)="11c298450d493927252392f4e8fb6cd543976b1a58549d6a05906eda7caee3efbb7af210767fb612caf9307c47d9ddce55ee9aa38da8b51982d14c9a6330d6b2a47b657f710980e1ae98670abf15bb90712818576a5c3b7993f1b7d7da7cf9de6695e0318365debd695fa8ef70a31056f71a39667b996a3f02317166d120abc643c5d8ff14967f48877c153f8a196b945649aef129e9a4965f3ff567adbd992041b298159227eb456d43", 0xaa}, {&(0x7f0000000540)="03bb6598bffefefac974222d0b2a45785413c4773a5dbc0efe71d168257cbddf8d351c2c05724150d7214a13d6230e8c7548857169d7fe4d7daaa997510a3effc143285d6f933f74151fff25056bc93a83f0765a0b691cae78a911882065699dd246526277042bf4c801aed07f69099cdf9de335e9aaf0e42e22f04072550852dcb4b93abe16a766f58cf7277aa081a64b780bc6a9eecf61f8828202ba2294cc0a34bc46295f3566649779c78807684857e976573b7791b061c0203816025b79a8971465ae29facd21e4af1b49cad5eb6e671aa744d3082fd64ff5190329f0fd481e318d5c599d9a6612a134e74715", 0xef}, {&(0x7f0000000640)="80ddc649c52612829894cd2ef2e968c6779afc25403c24a4cb5d0612419485a06d5835032813987741ff31f3d5cdb12a9c5ad4fbb3d97f45af0645a8facdee4e7df4d303f295491a480f6ba53b05109f735dcd3584c4e60b4fbb19dd7e7339bc61e8e1958a279d8c78c16edeeb1f1193e70dccd0dc25ffb3eef408a3caa2bfe517a86a873792fa9b91e0d90c55de2839848b6c61e56d37abfd8ae84a77d94c875e46bc335894bd1ea3c685fd852f8b6d3d36a564e083fbced78ee8b7916948b5467fdf6e6d", 0xc5}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000090000000000ac0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="300000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1477a48f160000000100000001000000", @ANYRES32=r0, @ANYRES32=r8], 0x5c, 0x8040}], 0x1, 0x4048800) 05:26:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000140008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000b00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000080602000000d6fcfb36000084000000"], 0x14}}, 0x0) 05:26:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000f0ffffffffffff08000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)="0084217f6d33d27054e500360fbd46242e02896ea6b6285f299d0b77306f9a20ef7df702057976fd7795ca0a34", 0x2d, 0xfffffffffffffffd) 05:26:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000003f0008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806010100000000f1fe00000000000005000100070000000900020073797a3000000000"], 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPSET_CMD_GET_BYNAME(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0xe, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) 05:26:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a37fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000c00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000806ab010000000000000000000000000500010007000000faa954fda697841eb522332ccc5b870ec1707e04b3a3a7d5a9c318c1a903271ecebe86f5c7540d14dd226f19a1c08db8743d4666095164e654b53a0dd2758e843cfc2aca3b20bcca4dae966932721b6b9dac0fa2e30940b1456142cc24ad6e871416e5cd92856fe26931034a22c3062eea34fec35d2bb5a5fc5bf74ac33e373bd5c17350d9f889cc7c5239047905827444d4dd4878bfd9eea640d5"], 0x1c}}, 0x0) 05:26:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000600008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000e00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b37fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 529.804912][T30637] binder: 30633:30637 ioctl c0306201 20000100 returned -14 05:26:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000001000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x5c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x88a}}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x35f1}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc050) 05:26:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$audio(0xffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) 05:26:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000001400000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300002b20008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c37fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000084) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) write$sndseq(r3, &(0x7f0000000000)=[{0xf8, 0x20, 0x81, 0x9, @time={0x6, 0x9}, {0xf8, 0x5}, {0x0, 0x15}, @ext={0x47, &(0x7f0000000100)="a7d01caa14419689bf1c1eea41668c880674803c58c3cee5f7d644ed080aa029d5d509166693d6d5eb2448f64f13ac560b630827f2a91447deca4b1cc70a80a4c529d8dbedccbe"}}], 0x1c) 05:26:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000001900000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 530.052744][T30660] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 530.071676][T30657] binder: 30653:30657 ioctl c0306201 20000100 returned -14 05:26:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xfffffffb, 0x7fffffff}, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000f00008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000003000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000004c00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:56 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d37fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 530.291549][T30673] binder: 30670:30673 ioctl c0306201 20000100 returned -14 05:26:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 05:26:56 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000010000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 530.383266][T30680] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 05:26:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000006000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$mice(0xffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x101080) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r3, 0x0) splice(r3, &(0x7f0000000100), r2, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r5, 0x0) splice(r5, &(0x7f0000000100), r4, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r7, 0x0) splice(r7, &(0x7f0000000100), r6, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180), 0x0) r8 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r8, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES64=0x0], @ANYRESHEX=0x0, @ANYRES64=r8, @ANYRESOCT=r1, @ANYBLOB="6e8418d7259d59c1bb6c7498332bdaae8b1b5252af04129c5ddd4ed2d53ad7a98af4c626ea52ec1d9ba71c75eb709cfb9fdb2c71240a860ba70301642cb4598af07337464801d50124c6899545cf736233e12be5dbe71fd5b236acc1aadbf59477c64e", @ANYRESHEX=0x0, @ANYRESHEX, @ANYRES16, @ANYRES16]], 0x1}}, 0x0) r9 = openat$vcsa(0xffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x200000, 0x0) write$FUSE_NOTIFY_POLL(r9, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0xfffffffffffffffd}}, 0x18) [ 530.514292][T30693] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 530.547721][T30693] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:26:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000200000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e37fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x1}}, 0xc005) 05:26:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000024000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000086600000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 530.719662][T30707] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 05:26:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f37fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000a00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xb}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r2, 0x0) splice(r2, &(0x7f0000000100), r1, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x3ff, 0x3, 0x80000001, 0x8001}) 05:26:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000038000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000006c00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000300000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:57 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="ea630440000000000600000001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000140)={r7, 0x1, 0x6, @random="89d27721901f"}, 0x10) 05:26:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563045c299612000063404001"], 0x0, 0x0, 0x0}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$TCSETXW(r5, 0x5435, &(0x7f0000000140)={0x5, 0x9, [0x1, 0x33f3, 0xce5, 0x8, 0x1], 0x48}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000000)=0x8905, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000000000000000000000050001000700000009003000"/35], 0x28}}, 0x0) 05:26:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000048000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000ffffff9e00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001037fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000020008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 531.134532][T30735] binder: 30734:30735 unknown command 1543791365 [ 531.157613][T30730] binder: 30729:30730 unknown command 1074029546 [ 531.169327][T30730] binder: 30729:30730 ioctl c0306201 20000280 returned -22 05:26:57 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000400000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 531.182118][T30735] binder: 30734:30735 ioctl c0306201 20000280 returned -22 [ 531.193665][T30744] binder: BINDER_SET_CONTEXT_MGR already set [ 531.213819][T30744] binder: 30734:30744 ioctl 40046207 0 returned -16 05:26:57 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000030008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 531.239805][T30735] binder: BINDER_SET_CONTEXT_MGR already set 05:26:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000fffffff000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:57 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000038fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 531.280412][T30735] binder: 30734:30735 ioctl 40046207 0 returned -16 [ 531.287216][T30744] binder: 30734:30744 ioctl 5435 20000140 returned -22 [ 531.305815][T30730] binder: BINDER_SET_CONTEXT_MGR already set [ 531.315430][T30730] binder: 30729:30730 ioctl 40046207 0 returned -16 [ 531.374588][T30730] binder: BINDER_SET_CONTEXT_MGR already set [ 531.390578][T30730] binder: 30729:30730 ioctl 40046207 0 returned -16 [ 531.392065][T30753] binder: 30734:30753 unknown command 1543791365 [ 531.428267][T30730] binder: 30729:30730 ioctl 8933 20000100 returned -22 [ 531.449046][T30753] binder: 30734:30753 ioctl c0306201 20000280 returned -22 [ 531.466949][T30744] binder: BINDER_SET_CONTEXT_MGR already set [ 531.474530][T30744] binder: 30734:30744 ioctl 40046207 0 returned -16 [ 531.492738][T30735] binder: 30734:30735 ioctl 5435 20000140 returned -22 05:26:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000fffffff500000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000436fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000040008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r5}) fdatasync(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000138fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000a00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 531.666910][T30770] binder: BINDER_SET_CONTEXT_MGR already set [ 531.690651][T30770] binder: 30762:30770 ioctl 40046207 0 returned -16 05:26:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000a0008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000f0ffff00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 531.721903][T30770] binder: 30762:30770 ioctl 89e2 20000000 returned -22 05:26:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000238fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 531.789146][T30773] binder: BINDER_SET_CONTEXT_MGR already set [ 531.815498][T30773] binder: 30762:30773 ioctl 40046207 0 returned -16 [ 531.815563][T30770] binder: BINDER_SET_CONTEXT_MGR already set 05:26:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000e00000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 531.838342][T30779] binder: BINDER_SET_CONTEXT_MGR already set [ 531.845431][T30770] binder: 30762:30770 ioctl 40046207 0 returned -16 [ 531.858565][T30777] binder: 30762:30777 ioctl 89e2 20000000 returned -22 [ 531.877875][T30779] binder: 30762:30779 ioctl 40046207 0 returned -16 05:26:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000600000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000e0008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000007fffffff00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000080601b838df94428204a500030000000000eedb0001000700000008ffee00"], 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563d9f2"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x400, 0x0, 0x1, 0x6ad, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r7, 0x6}, 0x8) 05:26:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000140008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000338fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x140e, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r5}, 0x14) read$usbmon(r0, &(0x7f0000000000)=""/58, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000009effffff00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 532.117179][T30800] __nla_validate_parse: 2 callbacks suppressed [ 532.117189][T30800] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000001400000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 532.167942][T30800] binder_alloc_new_buf_locked: 10 callbacks suppressed [ 532.167949][T30800] binder_alloc: 30797: binder_alloc_buf, no vma [ 532.225959][T30800] binder: BINDER_SET_CONTEXT_MGR already set [ 532.243897][T30807] binder_alloc: 30805: binder_alloc_buf, no vma [ 532.255778][T30800] binder: 30797:30800 ioctl 40046207 0 returned -16 05:26:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000600008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000f0ffffff00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 532.288132][T30800] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 532.305242][T30809] binder: BINDER_SET_CONTEXT_MGR already set [ 532.313098][T30809] binder: 30797:30809 ioctl 40046207 0 returned -16 [ 532.331735][T30812] binder: BINDER_SET_CONTEXT_MGR already set 05:26:58 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000438fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 532.336236][T30813] binder: 30797:30813 unknown command -220634363 [ 532.357342][T30812] binder: 30797:30812 ioctl 40046207 0 returned -16 [ 532.364606][T30800] binder: BINDER_SET_CONTEXT_MGR already set [ 532.384096][T30813] binder: 30797:30813 ioctl c0306201 20000200 returned -22 [ 532.386283][T30800] binder: 30797:30800 ioctl 40046207 0 returned -16 05:26:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_FPEMU(0xa, 0x2) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000008060101fdff000000000000000000000502007300993000000000"], 0x28}}, 0x0) sysfs$2(0x2, 0x1000, &(0x7f0000000000)=""/48) 05:26:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000006000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000f5ffffff00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000f00008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000538fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 532.601326][T30829] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000002000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 532.649233][T30836] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:26:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, 0x140e, 0x10, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty, r5}, 0x14) read$usbmon(r0, &(0x7f0000000000)=""/58, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000638fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000b20208000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000180)={0x81, 0x7, 0x7ff, 0xffff062b, 0x19980da7, 0x4}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x2c8, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfaa7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb79}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe23}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x47}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20004041}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:26:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000003000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000f000000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:26:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000308000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 533.099196][T30855] binder_alloc: 30847: binder_alloc_buf, no vma [ 533.136725][T30858] binder_alloc: 30857: binder_alloc_buf, no vma 05:26:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000004000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 533.196718][T30855] binder: BINDER_SET_CONTEXT_MGR already set [ 533.225010][T30855] binder: 30847:30855 ioctl 40046207 0 returned -16 05:26:59 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000738fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:26:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000005000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:26:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000a08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:26:59 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000003000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000072dfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7ff}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r7, 0x400, 0x70bd23, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4015}, 0x0) 05:27:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000006000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000e08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000838fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000a000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 534.009940][T30893] binder_alloc: 30887: binder_alloc_buf, no vma 05:27:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000001408000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000007000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 534.136581][T30902] binder_alloc: 30887: binder_alloc_buf, no vma 05:27:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000e000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000003f08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000938fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000008000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000092cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:00 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x48, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004002) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000414000427bd7000ffdbdf250800010002a49f8b1000010000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4045}, 0x800) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000006008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 534.361401][T30917] binder: BINDER_SET_CONTEXT_MGR already set [ 534.380195][T30917] binder: 30915:30917 ioctl 40046207 0 returned -16 05:27:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000009000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 534.427476][T30923] binder_alloc: 30915: binder_alloc_buf, no vma 05:27:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000014000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:00 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a38fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 534.479725][T30923] binder_alloc: 30915: binder_alloc_buf, no vma 05:27:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000002b208000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 534.521419][T30917] binder: BINDER_SET_CONTEXT_MGR already set [ 534.546019][T30917] binder: 30915:30917 ioctl 40046207 0 returned -16 05:27:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000a000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="25630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40086410, &(0x7f0000000240)={0x56, &(0x7f0000000300)="8708dd026c471dea452da7e6c4aecac5d5d3e07e704801bf74515e647106f72063d38795146ce77401f7de22086d33ce111f4d77d61de9dec62eb3c52a710468e34c308fc01b36860cd82271dc4b44782033cafefc0a"}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8021}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000080001000100000008000100020000000800010002000000080001000200000008000100010000000800010002000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 05:27:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000082cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b38fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a30000000f008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 534.737469][T30942] binder_alloc: 30940: binder_alloc_buf, no vma [ 534.771470][T30942] binder: BINDER_SET_CONTEXT_MGR already set 05:27:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000060000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 534.795133][T30942] binder: 30940:30942 ioctl 40046207 0 returned -16 05:27:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000b000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 534.865974][T30951] binder: BINDER_SET_CONTEXT_MGR already set [ 534.876828][T30951] binder: 30940:30951 ioctl 40046207 0 returned -16 [ 534.885935][T30953] binder: BINDER_SET_CONTEXT_MGR already set [ 534.913857][T30953] binder: 30940:30953 ioctl 40046207 0 returned -16 05:27:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000003000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC=r4]], 0x0, 0x0, 0x0}) r5 = dup2(r2, r1) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x7, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x890d}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x40040) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @local, @loopback}, 0xc) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x1ff, @remote, 0x2}, @in6={0xa, 0x4e20, 0xca2, @rand_addr="85ee6ba3699ecee70176ad6ee863fe82", 0x7}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e22, 0x1ff, @mcast2, 0x8}], 0x94) 05:27:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c38fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 535.061551][T30965] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.068381][T30967] binder: 30966:30967 ioctl c0306201 20000200 returned -14 05:27:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000f0000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 535.127648][T30968] binder: 30966:30968 ioctl c0306201 20000280 returned -14 [ 535.162460][T30967] binder: 30966:30967 ioctl c0306201 20000100 returned -14 05:27:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000208000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000806000005000100070000e8bef5ae3abed2d32be2544fb876000900020073797a307f000000a8ad50f35c59e503295d4891f171801de8677cc2c1cb6d8f74c37500000000000000000000000062615642c4d15d47c3fd4b36cfc6a5a5611af0ad4029ac289e3cd71fbd0579503b5f084461f9ea6e997bb238e1ed95d3f5232c8d4d31381f1db954249adb9fa8d13ae58b727056b12b4f4cd9717eff15e26a3c3ab9"], 0x28}}, 0x0) 05:27:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000e000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:01 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d38fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40002) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000806010100000000000000000000000005000100070000000900020073797a30000000004270fef15d10be0e0f8e25d0f029ec53af7afc9af95c57527a6bdadfd947f28e866bb1461e18dfad794d289bd52e79189ee1c293eee593ab6ed6d117a5a9fa116d10d3abf0415e90b8fd0485d25d7ee2ea55e880f61e"], 0x28}}, 0x0) 05:27:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000308000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000040030000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000014000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 535.458071][T30990] binder_alloc: 30988: binder_alloc_buf, no vma 05:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e38fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 535.537451][T30997] binder: BINDER_SET_CONTEXT_MGR already set [ 535.566122][T30997] binder: 30988:30997 ioctl 40046207 0 returned -16 05:27:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000408000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000019000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000095}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) r4 = openat$snapshot(0xffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x41000, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0xc00) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f0000000000)) 05:27:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000003400000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f38fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 535.814822][T31016] binder: 31014:31016 ioctl 800455d1 20000000 returned -22 05:27:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000a08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") [ 535.899699][T31022] binder: 31014:31022 ioctl 800455d1 20000000 returned -22 05:27:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000060000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000000)={r6}, 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @multicast2}}, 0x51, 0xfeff, 0x20, 0x3f, 0x1c, 0x3}, &(0x7f0000000000)=0x9c) 05:27:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000fffff00000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000e08000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001038fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 536.078338][T31036] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 05:27:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000006c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 536.137519][T31036] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 536.166032][T31040] binder: BINDER_SET_CONTEXT_MGR already set [ 536.182653][T31040] binder: 31034:31040 ioctl 40046207 0 returned -16 05:27:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000001408000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000f0000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:02 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:02 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000039fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:02 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000100000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000006008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000030000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000024000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000139fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000200000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000050000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 536.750495][T31078] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 05:27:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000239fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000038000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000060000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000300000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 536.962032][T31091] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000048000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000070000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000339fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x400002) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0xf4, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={[], 0x2e}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffffffc1}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r2) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, r2) fchown(0xffffffffffffffff, 0x0, r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r3) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, r3) fchown(0xffffffffffffffff, 0x0, r3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r4) lchown(&(0x7f0000000680)='./bus/file1\x00', 0x0, r4) fchown(0xffffffffffffffff, 0x0, r4) getgroups(0x6, &(0x7f0000000380)=[0x0, 0x0, r2, 0x0, r3, r4]) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f00000003c0)={0x78, 0xfffffffffffffff5, 0x3, {0x8, 0xd8e, 0x0, {0x0, 0x101, 0x2, 0x8000, 0x2e6, 0x5, 0x1, 0x3, 0x9, 0x5, 0x0, 0x0, r5, 0x81, 0x9}}}, 0x78) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x801) 05:27:03 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 537.152834][T31104] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:03 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000439fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x151180, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) 05:27:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000003000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000066080000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000400000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:03 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 537.321320][T31115] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000090000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:03 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000010000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19634001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000880)=[@register_looper={0x40406301}, @request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x1, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000000740)=""/216, 0xd8, 0x0, 0x2d}, @flat=@weak_handle={0x77682a85, 0xa, 0x2}}, &(0x7f0000000840)={0x0, 0x1c, 0x44}}}, @enter_looper], 0x1, 0x0, &(0x7f00000002c0)='s'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000140)=0xe4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000b185b9eaadefe51a6dcacdec1a1893eb16afdc4c52fb484db15b2449d0747aacc57423767c060000000000000000000000000000b5c70000851a8bdf931ef2cf73c7c58ed401ba65b35045954576ddce2695ed2dce025b86530d62fde440e66729905d1168a40b57272214c35158b5e0", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000580)=0x18) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000540)=""/62) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80000000}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffc}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1916a5328546fd0db633ad73f22001530e272e1e1c5c2d65138d06c0000000000000000000000dcd527299e0e7dd13e0bca63b365fc6db37a149c3cd3b0583b9e9292a3ce48a8d8d47ec4967f092a23848fcc29f8c9f096f8c2f43fe9d1396fb34e0fb738207feebce5459f77dd50d61be6d9bf45f4ddf4a51b4efc453d1deabb89b878759b66ec9d7f60fb89fe"], 0x5}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 05:27:04 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000539fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000a00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 537.636506][T31138] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 537.673596][T31138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000a0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x8000) sysfs$3(0x3) 05:27:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000639fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:04 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 3: r0 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x84, 0x0, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x90}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x800}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xe0}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x40048d1}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000024000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000b0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 537.959453][T31157] netlink: 'syz-executor.0': attribute type 10 has an invalid length. 05:27:04 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000739fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x540, 0x278, 0x0, 0x1b0, 0x0, 0xc8, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, &(0x7f0000000380), {[{{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@ipv6={@mcast2, @loopback, [0xffffff00, 0x0, 0xff000000, 0xff], [0xff000000, 0xffffff00, 0xff000000], 'bridge0\x00', 'ip_vti0\x00', {}, {}, 0x7464bcf724bddde, 0xfe, 0x5035857086015043}, 0x0, 0xa4, 0xe8}, @DNPT={0x44, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}, 0xb, 0x30, 0x401}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@AUDIT={0x24, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x1a}, @dev={0xfe, 0x80, [], 0x3c}, [0x0, 0x0, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffff00], 'veth0_to_batadv\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x80, 0x1, 0x20}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x16, "3aa5bfe0aaaf255ba6c84e100dbffdb28e1a3c288ead757b509dea144d1e"}}}, {{@uncond, 0x0, 0xf8, 0x11c, 0x0, {}, [@common=@frag={{0x30, 'frag\x00'}, {[0x4], 0x4d4, 0x8, 0x3}}, @inet=@rpfilter={{0x24, 'rpfilter\x00'}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x59c) mq_timedsend(r3, &(0x7f0000000300)="54284aaca2ed70e7496ea767dd7769f4d22fab881d8609ccca61dc4f100a3e8523ea05e57ee884c0b72bc889ae3d79d2d96fa1c4714d9af7ed57c6bb84556dc461d2311d19b5dd1b698a81", 0x4b, 0x8000, &(0x7f0000000240)={0x77359400}) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, 0x2, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x1c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xdd6}}]}, 0x50}, 0x1, 0x0, 0x0, 0x48000}, 0x800) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000038000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000001400000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:04 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 538.234522][T31176] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 538.254397][T31174] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 538.254405][T31174] binder_alloc: 31169: binder_alloc_buf, no vma 05:27:04 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000839fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 538.359829][T31182] binder: BINDER_SET_CONTEXT_MGR already set 05:27:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000e0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:04 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000048000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 538.436199][T31182] binder: 31169:31182 ioctl 40046207 0 returned -16 05:27:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000680)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, &(0x7f0000001700)=""/23, 0x17}, 0x2) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000570000000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef0066cd8b08b8c5236b93b9797b443f00e370d1515d2e1fa63259e6d4bd057729810c91f2286f85b4de271efee3280bc5808c5d541e3934042cf160c74f63e52570ba0b5cd7fc1150f088a91f66b58f08f0eb8942d0aec25394509b94fa490e995d3dfc18894bfe4a049ae055578250676cd309", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d65138cf6c0000000000000000000000dcd527299e0e7dd13e0bca63b365fc6db37a149c3cd3b0583b9e9292a3ce48a8d8d47ec4967f092a23848fcc29f8c9f096f8c2f43fe9d1396fb34e0fb738207feebce5459f77dd50d61be6d9bf45f4ddf4a51b4efc453d1deabb89b87c759b66ec9d7f60fb89fe"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x12}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0xffffffffffffffff}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000080601010000000000000000000000797a3000000000"], 0x28}}, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000488bb7d7ab0fdb85096feccffe31459a78f2211fb03b66f1cfd6f3a543fde3f3cb7bff5209f837505cc699c96447cd5dbb39cf2d"], 0x1, 0x0, &(0x7f00000002c0)='s'}) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 05:27:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 05:27:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000008ed16b5800000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 538.573062][T31194] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000140000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000939fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 538.658484][T31196] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 05:27:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000000080a0040000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 538.726996][T31196] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.766495][T31205] binder: 31195:31205 unknown command 7 05:27:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) [ 538.801625][T31205] binder: 31195:31205 ioctl c0306201 20000100 returned -22 05:27:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000190000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, 0x4, {0xffffffff}}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 538.914244][T31212] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000006000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:27:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a39fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008020a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000004c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 539.027771][T31218] binder_alloc: 31216: binder_alloc_buf, no vma [ 539.067078][T31218] binder: BINDER_SET_CONTEXT_MGR already set [ 539.115628][T31218] binder: 31216:31218 ioctl 40046207 0 returned -16 05:27:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 539.157993][T31231] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:05 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20800, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x930}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x78}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000000)) 05:27:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000600000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:05 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b39fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008030a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000586bd18e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 539.421044][T31248] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c39fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000008660000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008040a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 539.525529][T31251] binder_alloc: 31239: binder_alloc_buf, no vma 05:27:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) [ 539.584856][T31251] binder: 31239:31251 ioctl 540f 20000000 returned -22 05:27:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000006c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d39fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 540.012321][T31256] binder: BINDER_SET_CONTEXT_MGR already set [ 540.018464][T31256] binder: 31239:31256 ioctl 40046207 0 returned -16 05:27:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806010100000001000000000000000005000100070000000900020073797a3000000000"], 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000000)={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 05:27:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 05:27:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000000080a0a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000f00000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000ffffff9e00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e39fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) [ 540.378990][T31293] binder_alloc: 31289: binder_alloc_buf, no vma [ 540.408164][T31293] binder: 31289:31293 ioctl 400442c9 20000000 returned -22 05:27:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a3000000000080e0a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000400300000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:06 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f39fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 540.446731][T31298] binder_alloc: 31289: binder_alloc_buf, no vma 05:27:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000fffffff000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[]}}, 0x0) [ 540.491078][T31298] binder: 31289:31298 ioctl 400442c9 20000000 returned -22 05:27:07 executing program 3: r0 = openat$vcs(0xffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40a40, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000034000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008140a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[]}}, 0x0) 05:27:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00001039fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:07 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="224fd605"], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x410241, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0684113, &(0x7f0000000100)={0x0, 0x2, 0x10000, 0x3, 0x6, 0x5, 0xa25, 0x0, 0x5, 0xed4, 0x7, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$isdn_base(0x22, 0x3, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r6, 0x0) splice(r6, &(0x7f0000000100), r5, 0x0, 0x800000a, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES32=r6], 0x1}, 0x1, 0x0, 0x0, 0x80}, 0x10094) 05:27:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000fffff000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000f0ffff00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[]}}, 0x0) 05:27:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008600a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x891) 05:27:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000003afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000001000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:27:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000b40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x81, 0x5, 0x0, 'queue1\x00', 0xb78}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000007fffffff00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 541.097676][T31351] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 05:27:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000002000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:27:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008001140000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 541.223314][T31355] binder_alloc: 31354: binder_alloc_buf, no vma [ 541.257953][T31355] binder: 31354:31355 ioctl c08c5332 20000100 returned -22 05:27:07 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000013afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 541.290141][T31364] binder: BINDER_SET_CONTEXT_MGR already set [ 541.298825][T31364] binder: 31354:31364 ioctl 40046207 0 returned -16 [ 541.308140][T31363] binder: 31354:31363 ioctl c08c5332 20000100 returned -22 [ 541.317539][T31355] binder: 31354:31355 unknown command 536871104 05:27:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000b40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:27:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000003000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 541.337809][T31355] binder: 31354:31355 ioctl c0306201 20000280 returned -22 05:27:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r2, &(0x7f0000002200)="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", 0x480, 0x0, 0x0, 0x0) dup3(r1, r2, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) [ 541.429108][T31377] netlink: 'syz-executor.0': attribute type 11 has an invalid length. 05:27:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000009effffff00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000004000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000023afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008001040000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010500000000"], 0x1}}, 0x0) 05:27:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="e371a01c7d83e16db1918b5328546fd0db633ad73f48121530e272e1e1c5c2d65138cf6c0000000000000000000000dcd527299e0e7dd13e0bca63b365fc6db37a149c3cd3b0583b9e9292a3ce48a8d8d47ec4967f092a23848fcc29f8c9f096f8c2f43fe9d1396fb34e0fb738207feebce5459f77dd50d61be6d9bf45f4ddf4a51b4efc453d1deabb89b87c759b66ec9d7f60fb89fe"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) r7 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) bind$xdp(0xffffffffffffffff, &(0x7f0000000000)={0x2c, 0x0, r5, 0x1f, r8}, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010500000000"], 0x1}}, 0x0) 05:27:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000005000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 541.651504][T31390] netlink: 'syz-executor.0': attribute type 16 has an invalid length. 05:27:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000033afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008001140000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 541.761682][T31394] batman_adv: batadv0: Adding interface: veth13 [ 541.776006][T31394] batman_adv: batadv0: The MTU of interface veth13 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. 05:27:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010500000000"], 0x1}}, 0x0) 05:27:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000006000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 541.897164][T31410] binder_alloc: 31393: binder_alloc_buf, no vma [ 541.951281][T31394] batman_adv: batadv0: Not using interface veth13 (retrying later): interface not active [ 541.993671][T31408] batman_adv: batadv0: Removing interface: veth13 05:27:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000f0ffffff00000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:08 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000043afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40020000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000007000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30"], 0x1}}, 0x0) [ 542.425468][T31408] __nla_validate_parse: 6 callbacks suppressed [ 542.425476][T31408] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.459237][T31394] binder: BINDER_SET_CONTEXT_MGR already set 05:27:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806010100000000000000000000000005000100070000ee0800020073797a3000000000"], 0x28}}, 0x0) 05:27:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30"], 0x1}}, 0x0) 05:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40030000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000053afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000008000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000020000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 542.478142][T31394] binder: 31393:31394 ioctl 40046207 0 returned -16 05:27:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30"], 0x1}}, 0x0) 05:27:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000009000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40040000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000200)={{0x3, @name="533f42c95ee579ee11471dafb61b0a426228d1ec6fd43f3efdbe3dc15f2e1fc3"}, "3fcb5de8c1551573857d709306a7af6df32cffa944bfe100e82fd3533a00fa7f", 0x1}) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffc6e, 0x2, 'syz1\x00'}]}, 0x28}}, 0x4054855) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r4 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r6 = socket$isdn(0x22, 0x3, 0x27) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000140)='/dev/binder#\x00', 0x0, r6) 05:27:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000063afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000010000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a3000000000080003400000000114000000"], 0x1}}, 0x0) 05:27:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000000a000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400a0000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 542.855154][T31467] binder_alloc: 31464: binder_alloc_buf, no vma [ 542.885098][T31467] binder: 31464:31467 ioctl c0c85666 20000200 returned -22 05:27:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a3000000000080003400000000114000000"], 0x1}}, 0x0) 05:27:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000073afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400e0000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 542.942497][T31472] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 542.952571][T31467] binder_alloc: 31464: binder_alloc_buf, no vma [ 542.959807][T31476] binder: 31464:31476 ioctl c0c85666 20000200 returned -22 [ 542.975710][T31472] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 05:27:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="056304400000000000634040014dac07e7f110a28530b1380adc621ec46bedb430bf87848ddfd12f19f7eb695675a1e96d4a01d51e91304e117c8bc6d9db2dd90c7db494415b3f243fa843cc5e3445338b5b66907a77224aa3f6dd411831089693386bbf76de72eb87c87eee2dfd928f5e92b2eb493fcac5e2381108db259fde2ba4a30db0c6d4705bc9cc89163617334f2f6fa6e3b59e8b75d01270522d360b7e16aca9ff6d0d254eacea7e596a280c0aa01a4f6ba3a921eb6961261cf41b7d629f77e26c15c2a23dde2c5ffdffffffffffffce6f7693b5fda375024d1a1087f72aef3fcb244bc4324d971cf0"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) connect$l2tp(r3, &(0x7f00000001c0)={0x2, 0x0, @multicast2, 0x2}, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4004040) r4 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000063404001000000000000005af5ba0f647f87f87565982644c2848b0c61b5fefbdc7be4217c046228026c27a041eab41e85f95c8ef972a0c98b084ef816aff6c43b68ad224926f0f276917dc650160416e714c60816e6798ba943cc29eb36b1e9eed28c886d6a7861046e034b1e55a4c8d0e98265991b501c9aa3b31cb6ee0f000000000000f1cbbc179b5ba8b6e0ab59fac18d756d25fd279f2630662d281fe7d90c5a64aa5d50efb2abbb350f64abe3ab51b621aeb8b6bb0edb5506b262fe2d99aceb711df9bba1eb71f792a3aa160e733e687dd8be18aaa90a0001303482084a1d7a0602"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10008000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x200, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 05:27:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000000b000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a3000000000080003400000000114000000"], 0x1}}, 0x0) [ 543.091262][T31479] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 543.099407][T31479] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 05:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40140000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000024000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 543.215323][T31491] binder: 31490:31491 unknown command 808464432 [ 543.238652][T31491] binder: 31490:31491 ioctl c0306201 20000200 returned -22 05:27:09 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000083afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 543.270753][T31496] binder: BINDER_SET_CONTEXT_MGR already set [ 543.305831][T31496] binder: 31490:31496 ioctl 40046207 0 returned -16 05:27:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000"], 0x1}}, 0x0) 05:27:09 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40600000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 543.327527][T31491] binder: 31490:31491 unknown command 1080229888 [ 543.348189][T31491] binder: 31490:31491 ioctl c0306201 20000280 returned -22 [ 543.369548][T31501] binder: 31490:31501 unknown command 808464432 05:27:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000000c000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 543.388691][T31501] binder: 31490:31501 ioctl c0306201 20000200 returned -22 [ 543.414636][T31500] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 543.417122][T31496] binder: BINDER_SET_CONTEXT_MGR already set [ 543.433668][T31496] binder: 31490:31496 ioctl 40046207 0 returned -16 [ 543.436782][T31500] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 543.441054][T31491] binder: 31490:31491 unknown command 1080229888 [ 543.519509][T31491] binder: 31490:31491 ioctl c0306201 20000280 returned -22 05:27:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40f00000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000"], 0x1}}, 0x0) 05:27:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000000e000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000000)=0x3c0a) 05:27:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000093afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000038000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40b20200000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000"], 0x1}}, 0x0) 05:27:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000014000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 543.783012][T31525] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 05:27:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a3afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 543.823845][T31526] binder_alloc: 31521: binder_alloc_buf, no vma [ 543.844289][T31526] binder: 31521:31526 ioctl 40045201 20000000 returned -22 05:27:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df000000000000000000"], 0x1}}, 0x0) [ 543.896417][T31538] binder_alloc: 31521: binder_alloc_buf, no vma 05:27:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000019000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000300000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000048000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b3afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 543.947877][T31539] binder: 31521:31539 ioctl 40045201 20000000 returned -22 05:27:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x58, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0xc800) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x84, 0xd, 0x6, 0x0, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r5, r1) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f0000000100)) 05:27:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df000000000000000000"], 0x1}}, 0x0) [ 544.051565][T31544] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. 05:27:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000004c000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df000000000000000000"], 0x1}}, 0x0) 05:27:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000002000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:10 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c3afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 544.218334][T31555] binder_alloc: 31553: binder_alloc_buf, no vma [ 544.261665][T31555] binder: BINDER_SET_CONTEXT_MGR already set [ 544.285247][T31555] binder: 31553:31555 ioctl 40046207 0 returned -16 05:27:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000060000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 544.325768][T31564] binder: BINDER_SET_CONTEXT_MGR already set [ 544.351365][T31564] binder: 31553:31564 ioctl 40046207 0 returned -16 05:27:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/126], 0x1}}, 0x0) [ 544.371921][T31560] binder: BINDER_SET_CONTEXT_MGR already set [ 544.379147][T31560] binder: 31553:31560 ioctl 40046207 0 returned -16 [ 544.424382][T31564] binder: 31553:31564 unknown command 16 [ 544.451065][T31564] binder: 31553:31564 ioctl c0306201 20000100 returned -22 05:27:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000a00000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/126], 0x1}}, 0x0) 05:27:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d3afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05b022ec040034090000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$TIOCL_BLANKSCREEN(r3, 0x541c, &(0x7f0000000000)) 05:27:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000866000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000003000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/126], 0x1}}, 0x0) [ 544.679531][T31588] binder: 31581:31588 unknown command -333271035 [ 544.689596][T31588] binder: 31581:31588 ioctl c0306201 20000280 returned -22 [ 544.714760][T31588] binder: 31581:31588 ioctl 541c 20000000 returned -22 05:27:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000006c000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000e00000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 544.799612][T31593] binder: 31581:31593 unknown command -333271035 05:27:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e3afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/127], 0x1}}, 0x0) 05:27:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000004000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 544.843494][T31593] binder: 31581:31593 ioctl c0306201 20000280 returned -22 [ 544.861699][T31599] binder: 31581:31599 ioctl 541c 20000000 returned -22 05:27:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) r4 = accept4(r3, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000000)=0x80, 0x80800) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffff159}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x2000000) r5 = openat$vimc1(0xffffff9c, &(0x7f0000000340)='/dev/video1\x00', 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80047601, &(0x7f0000000380)) 05:27:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f3afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40001400000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/127], 0x1}}, 0x0) 05:27:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000ffffff9e000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 545.016403][T31610] binder_alloc: 31609: binder_alloc_buf, no vma [ 545.040118][T31612] binder_alloc: 31609: binder_alloc_buf, no vma 05:27:11 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/127], 0x1}}, 0x0) 05:27:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000103afb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:11 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000a000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40003f00000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000fffffff0000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:11 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20800, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x930}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x78}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000000)) 05:27:11 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000003bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40006000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000fffffff5000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000e000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000013bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000f0ffff000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4002b200000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 545.652645][T31638] binder: BINDER_SET_CONTEXT_MGR already set [ 545.680924][T31638] binder: 31635:31638 ioctl 40046207 0 returned -16 [ 545.711821][T31653] binder: 31635:31653 ioctl 540f 20000000 returned -22 05:27:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000023bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000007fffffff000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000014000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000f000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40004003000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000009effffff000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000033bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000060000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000f0ffffff000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000340000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:12 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000043bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:12 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000f5ffffff000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000f0000000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40fffff0000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000053bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000020000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000010900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000063bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000030000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000030000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 2: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000020900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000073bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000040000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="08002dbd7000fcdbdf250200000014000100fe8000000000000000000000000000bb14000100fe8000000000000000000000000000bb1800040000"], 0x2}, 0x1, 0x0, 0x0, 0xc0080}, 0x8041) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x800, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = memfd_create(&(0x7f0000000080)='eth0\x00\xb7\x84^b#\xf5\x8a\x8d\xb58\x13\xa9\x8d\x8f\xe6\xee$F\xf5\x8bl\xc1\x1c\x9a\x1b\xbb\xe0N\xef\x1b\x98\xf4N\xe5\xb4\x87\x8b\x00o\x93a\xba\xfb\xfb\xe4\xf0\x04\xbc\x1e$%\xf2\x80\xfd\xb11\xb5\xf2\x1fq\x8f', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r4, 0x0) splice(r4, &(0x7f0000000100), r3, 0x0, 0x800000a, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0x9f0000, 0x401, 0x88, r3, 0x0, &(0x7f0000000000)={0x980919, 0x0, [], @ptr}}) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r8}, 0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={r8, 0x3f}, 0x8) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000a0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:13 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000050000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000083bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000030900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x43c, 0x3f3, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1, 0x2, 0x8, [0x0, 0x3f, 0x4, 0x401, 0x5, 0x20, 0x40, 0x950, 0x20, 0x1, 0x41dd, 0x7, 0x6, 0x4000, 0x3, 0x7fffffff, 0x9, 0x3ff, 0x8, 0x80000000, 0x7, 0x8, 0x400, 0x6, 0x7, 0x8, 0x7f, 0x6e, 0x4, 0x401, 0x8cfd, 0x80000000, 0x1f, 0x0, 0x2a, 0xcb, 0x3b8e, 0x0, 0x3ff, 0x3, 0x2, 0x87, 0x0, 0x2d5, 0x7, 0x7, 0x3, 0xa1b, 0x7, 0x4, 0x6, 0x800, 0x600, 0x0, 0x4, 0xf6c0, 0x8, 0xff, 0x3a71, 0xfffffffb, 0x1, 0x480, 0x5, 0x2eaa], [0x0, 0x4b, 0x6, 0x4, 0x4, 0xf11, 0x30, 0x7ff, 0x7fffffff, 0x7, 0x100, 0x9, 0x3dc, 0x0, 0x7f, 0x2, 0x1, 0x37, 0x8, 0x80000001, 0xe6cd, 0x8, 0xa5a4, 0xa50, 0x5, 0x3ff, 0x0, 0x1, 0x0, 0x6a9bb838, 0x8000, 0x3, 0x4, 0x2, 0x6, 0xac0f, 0x4, 0xfff, 0x2, 0xddfd, 0x6, 0x1, 0x4, 0x7, 0x6, 0x0, 0x3, 0x5350d2ca, 0x3ff, 0x6, 0x800, 0x7, 0x6, 0x56200000, 0x80, 0x8, 0x1, 0x9, 0x1000, 0x6, 0x3, 0x8b, 0x9, 0x6], [0xdd3, 0x1, 0x3, 0x4, 0x1, 0x6, 0x2, 0x4, 0x9, 0x2, 0x6, 0x7, 0x535, 0x1, 0x10000, 0x5, 0x7, 0x4, 0x55, 0x9, 0x5, 0xf4, 0xff, 0x7396793, 0x6, 0x1, 0xffff, 0x4, 0x80000001, 0x3, 0x1f, 0x4, 0x2, 0x40, 0x7, 0x1b9, 0x3f, 0x1, 0x200, 0x814, 0x3, 0x2, 0x40, 0x0, 0x0, 0x400, 0x80, 0x3, 0x9, 0x1, 0xfffffa5d, 0x5920, 0x80000001, 0x6, 0x0, 0x0, 0x9, 0x7f, 0x8, 0x5, 0x3, 0x7, 0x5100, 0x348], [0x1838, 0x1f, 0x7, 0x0, 0x81, 0x8, 0x3, 0x4fa5, 0x2, 0x8, 0x7, 0x2, 0x4, 0x10001, 0x2, 0x3, 0x4, 0x2, 0x3, 0x8000, 0x7, 0x3ff, 0x1, 0x7, 0x70b, 0x557e, 0x7, 0xfffffffd, 0x6, 0x4e, 0x6fa, 0xa960, 0x2, 0x80, 0x6, 0x400, 0x1, 0x1, 0x8, 0x7, 0xfffffffc, 0x6a5, 0x1ff, 0x8, 0x0, 0x0, 0x6, 0x400, 0x4, 0x5, 0xe9, 0x5, 0x0, 0x2, 0x6, 0x101, 0x9, 0x1, 0xa2b8, 0x200, 0x8000, 0x712, 0x1, 0x6], 0x1c, ['syz0\x00', 'syz0\x00', 'syz0\x00', 'system`^\x17$\\-\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x43c}}, 0x4004011) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) 05:27:13 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000000e0000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000060000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:13 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000040900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:13 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000093bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:13 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000070000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x110, 0x0, &(0x7f0000000440)="8e82b84990aa501ea2740eabc0e49853e14e5d27c15b4e895604c2fe88d4f870f44b1c479ec02067404e10704850de49ad361d7d3ff05bd1a8ef90b92cde52bb321714fe98256ff8c5d9336c6f336afd563042943f7c0da6a3f2ec4b030ec2a36f70f5cd67608fa4f1117647e0e62b12a7ea1fd98c312c5c8316bf8fe6409159e442ced4f1b7c3127adafe3447aec4ae618af145b9e1b448090b0edea47ff5969f8e311f73b81b0d7df93fad73a28619a7e002370f963b143aec27730900000073cf2256c170b92f7f4d75af7f321f921244c72cf331e502e87895cfa05634016c64e85c1e8354da4663d820f4cf82680af8bdaa3e9ae36e82c52666e0f302d21161f6f9fc2f98755d1898c46fcff1e1"}) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e23, 0x1, @local, 0x32}}}, 0x84) r4 = syz_open_dev$binderN(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r5 = dup2(r4, r0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) accept4$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x80800) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000003c0)=ANY=[@ANYBLOB="6d616e676c65000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079a614037cf2fc19e03b5acd68de9600"], 0x54) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 05:27:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400000000a0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a3bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 05:27:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000140000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 547.595638][T31776] binder_alloc: 31775: binder_alloc_buf, no vma 05:27:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000080000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b3bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 547.657433][T31776] binder: BINDER_SET_CONTEXT_MGR already set [ 547.682774][T31776] binder: 31775:31776 ioctl 40046207 0 returned -16 05:27:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400000000e0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 05:27:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'syz0\x00'}, {0x20, 'md5sum}!'}], 0xa, "3db2e1e63f40f721dece9e8b05d3871e7c2f9a6ad0f97f0a48cfce9e764ab721adfb3c916a46832e44dd2291bf833cb98edd7a2744c7a4eabb585a23501426197f08460ed8ef7d67d64c3c3bae2a5a3de9e133b05a263f15702d8a3ad340fe9b6f5ee451dcba7a4313d40afee744a9128403163870b7987dacb155366540c51ae928d6ff32f8696c432cc6a0d63b7b1157d20d64f4136a930e1bbc259127a3254fa676844cfc780c9fb451d34f2289709f0f157f5e32ea31190e746d4fbb2d7d0e30def0"}, 0xde) 05:27:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000140900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000090000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c3bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 05:27:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000600000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000806010100000000000000000000000005000100070000000900020073797a30000000004cd92309843f0e258e17f78d21b5a9fc63c0a0d0d34d6146905d02f86049526eb860237ae8ebd089f13ce407fa8fca8ab0dcdaa2c4900000000000000000171f003e0e019c46ab34d3608a8da7808e707ab7b16ebaa072891dde0ebf9bea556ea0b5b692b3de00edccb24aeb628f74c1f58f25dced13e280328d8fbf479016d53889"], 0x28}}, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@register_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)='s'}) sendmmsg$alg(r3, &(0x7f0000002b80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="a2ef47280621065e10ee2bdb74cf2a7054c8b6897076a7295f47ac819d3f665dbc378bab3b6cf026c3d89d793774a9c84638b2e1c98b4771de0786b93c9525ad97107b44b5de2ed396ae3b85", 0x4c}, {&(0x7f00000002c0)="671d6e1dca2b132696a50b0b009525b887a1b53b774489b899406647c2df4c89645d936398af7d41e3fb72f0a91d4d7f1de2396c0685ac08d083f52af29b0c8f807ab79faf336f457041ce5b2decf1e714a63a00b147507625d42b567a53f54c8a17778197f09ebc01dfa4606c45e1358dffa7c9d4acecb723b3daf6a6db782a47b42db8dc08ffd63d43a5b2ab4df8c2dd80ec034e7fd91f0986105e99ab4ded4fbc36542d2f9f114b3312f204169ddb99413633588f990d5bb28d6a11537b525c100caaa28164fa1c14e0d8bc1127cba9f5", 0xd2}, {&(0x7f00000003c0)="018bcf8df2ecc68fca2838cef1f3446012552ece1b163271b990a1af3e552fea6260919411615315c87428dd1c952dcfc52075f6245f44fe3cd57d79355fc49a07a4decada5eff9eab443c2cf091b4b91da081603c062df77127031de6d34624e6da7621b0d5a2d5e744bee282ede9b0abfdab4543ee2756cd5480d6f88ff6f5390375c21fe17d2cc92d834a4f4436879945afb05eabe29ce9cf99c8f858eed96551e4e39630409a08781db4722fbc6acb472928e9e4719d66f6fbbc9c07b3a6e787478b5cc2fd3807f71f258643b5d6a40105d0e9df2c887378eb190ec4901ac6a5b0f65def258ba9e18c990e88b5d3d2ed445471540503f1fceebeec02db", 0xff}, {&(0x7f0000000100)="3fa2803ae6afc78c5760a8e07e9a21f576e78c00e231ff4b0aabfeaddab1033a45df3a4cc5a0ccf8656b55d30b738613b980d969c0845dd4c0cacc63be33f1cb7f86e4503bb9ce6645d142ece83410afce3e1187df9dde11a2f9637c3df0250ec64438da7f646b1af0495699b40faf2e4c5428368fdf6b0df256f2fe329e8fdad041f47e74ee15a0bc9e4415592208609a1bce2ae1135281b425ff8abb7a1051def016a56ec1e97333f75b5cf19d57a634df5686d95de88896ffed", 0xbb}], 0x4, &(0x7f0000000500)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x3}, @assoc={0x10}], 0x40, 0x15}, {0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)="0291", 0x2}, {&(0x7f0000000580)="b983a7909abd5b6a6dde6f8c41d85d62bf8910f72f68fbe07b1b44a2eba5dfe4da67f9824733e534a78969d84cac2efe7440fffdf8eb998e7fed9bc7e253db0a51158678f12c51dc3ea792a6a2882b9b0d936f6c0e437b1300b031d0d776063f98ebe79466bd0d4de19a103b3455ebeac0e03cc02ad816a9c517e094eda8dd4f45", 0x81}, {&(0x7f0000000640)="5a6b4b38f50dca2e9f8583167041c25eb67c4c575393ea0feb1fcef7bf05d0f5a1387db0c49319f2fd09af60c6e72a7479cec98d578eada5b6b444d91a91b21af6449ddfe9ec901acaa180d778cec8e5b5f95bc1a2a66b18edd78fe13fc2195b9b456aa4622acc6f046a31f1ea8bef176ad7e5b917ad395b0a960d8f42d7cb8486dedc434e1787fb5a7f69c1d29d673ec0da5864e38a92e1bbfd4228a9e9b1f9dba00661d776d8e0a99e4cc66b22f35544456ced2bc7aef01c0282d2ff7911e8dc24730c066a07a98c726ea2af010be36716b8fabdca41a12f585cfe8951e7e0c1", 0xe1}, {&(0x7f0000000740)="10ee6e1ed3b35297fbd88e68ce4c6cd4da38fbb91bb3f00ddf36c7c8c00d0a16f4d0c2df42c75ae18a8a33172e1f0c18315a781f02abf90a2a29c19bc77601aa2c145eb772aa53bfc33f8bb545ddf24b1609645cdee63dc01095253cfc586ba89ffa871121f4a46ae7e1d6ea", 0x6c}, {&(0x7f00000007c0)="08fad935e6b47fb13005c523f11b44d8c6ce94fd5d171f761ebb10030dda0f347f441ec911855e8c3a5185a7be424cea373accd239e6c6111ee120c7e22af4a0c5b7820ee2574b1dc167077dbec4993840ed798a80c0f04059fbc296cf0eb2aeb0584fec4c1c618562f364ab4d0e343096dc378d0e7711ffa9ed25540d2736a4f1cb096d983ae8f427255791a5a1c38125d82c5682798cba1b879a491649bcf4c288549059c3b3972d", 0xa9}], 0x5, &(0x7f00000008c0)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0xfff}, @assoc={0x10, 0x117, 0x4, 0x7fff}, @iv={0x30, 0x117, 0x2, 0x1d, "d1abf6100325447ffb4abfc3011ba82d47069d9995d0df428a025a5de5"}, @iv={0x88, 0x117, 0x2, 0x78, "eaecababd3f172532ad3e6274499b1cad0fda04c555015130231bf7f8e74baff44eabec4c2305641ae9e15c408d56c37962271c723d96d679c2c5ab9a4e87de51736238c05a54657bff8135e11c61a34bf53217cfa208c0bd942c6e87189ed2a9f2cb0933bbd26c7d389b1479cd984d823958f2fec33b720"}], 0xf8, 0x10}, {0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000009c0)="5710db25bef1b64d5270eee27b1525f3ed4743159297a585a04180b9a9daeb037af3085204c818a4a9c7c58c955280f92765b06b0e117fbcb46405399424b74f1ecb3960343af80f79034ff24a9f1b08a0acdc0c342d4ae81cb1de5fc610e52766a2f50a392417a1bf81ad02f36a3cfc7ab9140064307304", 0x78}, {&(0x7f0000000a40)="857a56e425af9af0c87cb9e9800fe5c43913a13edf27040ce1e15f4ca2d7af346815165e1f29f601825fd03c14e0ce75f2dbf1506259dff98ee40a806541c04b3363eb506f12c840b9701693d1a5da75af414b8238a3d6", 0x57}, {&(0x7f0000000ac0)="efad58f5cfe847b8f679f8b4783d4efa937d9194870d867e3032cfcfce63e72e50583608285bb22008778fe7296fe4b6aa97cd6f8d901f22f7404af89c2fa436434f4387a4f595a1bd610f2a2813164e795eb6a38161489bd3cf8bc8317516355c14356511ce424a5aebb83a15df3aebce02c015b0269c09a2d765ff761a25ad509c7e716d67fb3f58d44b9e7de3691bac3f499209d6326dee47891831ab62a3730c0cc8e5d83fa7942dbe2252e66b83debd2d20b36ba09cc312", 0xba}, {&(0x7f0000000b80)="ee81223f6c80ad0eda1f0fb055bff384481d2947a9fe06258e6828c86ffaaa2d86992692ee0dc0d7de78171f714cad19a3fba98c38c86b", 0x37}, {&(0x7f0000000bc0)="04422eda716c2526ef9e8f7dbe508548a0b49ead0c89fd46116cba7d56961b3d98ce097b2a73f8cbc2b592c17c534bd0b6d471e16ee5936bbc9a88ef5879f07e8c8e7013bb41e213cd3390ae03931996c5694f00430bfa406b51780e96a920efb52ec93a52f011859f3ca3fde253159c05c29aa3157a7912f0ba3437cbf541bb76017a4592216d72b2421fd44031c543cd1f1a2f76db9bd917639eeeef5f50e210654bc293e2927601c031df8b12c2800d59f2c17c2084b02abc17b6d38e716e91288e5523d2bdf47d039a719226edffc5531331a4219723bc1b4fe684fd0124be", 0xe1}, {&(0x7f0000000cc0)="6bd0917d4b742fc5afe58554790df0d69c9f38bfbe3e33ae8e6dd9d2e2531ceb06c21a082b1d916498c364d538e868dd746234a2dfd81f9f63828999eadf93c6b2186bdfa65e0e922d8afe3054f6ed33712cf5579cffca738ff14627c10737cac0687477763dffcab0a3ad5469dcfe82dcfcfb522a6005358879425be148a2f2d64583b53018a96edd7ef1d9e62f277db38f3e0c181dcd3885efda93cd38926a717861a76249f03c6026a862c3ed91626e0106231c49108e62d051e83b0e6913cba57fd21d67a62692e5f4f1a0727476eaa6f8e1ef5f77d561ec5b5e54dce5bbf2f237ba0d3ff17dc7a2d1bcc87ce0c86a020da9c37f", 0xf6}], 0x6}, {0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e00)="13a7bf474473589ac053ebf8417d937657734e39ac298abdc1ce8617f343c09708074801db33cb4afc9367ac806610113e3dec2d9de6e94bb218046300994bc1511463e357e14c59ccae3da29849409e874bfa3594264f5d15b8bbf327f9c4f19760f7c61ce98b0c8a4a6e695e473254e4e464631e04af056ba90a85b19697b670ee0223eaf1baddc3850ec2e31080f5ae7cd48c9421ea95ff04f9bc89a7efaa51f1ab5b01c1abde498cd0c090683f19015004e41e42eb3848", 0xb9}, {&(0x7f0000000ec0)="34f134014da35115d357acf814217c6616518a0eac1ec6e6ea2396763dcfb3d5aa1f6aadc767fc2b981d935d592977896021ef7ffa356c0428744276bd73095e47be43c273ead775c0ece35403e1e7fc9016bccc2fee43985ea812468920a3ce09a6c955093906c53b6d5b6a48d49107254c358114298cf92c974b811d8a05d63da8f5653511fbe1aaa0815bddd806042954ac7c6572ac869f723032ddcab06261c3013609", 0xa5}, {&(0x7f0000000f80)="800955140cfa3e106c35e99a8d3798b7845b1c399bf823404cb2631d5aa6fe6c8f3b96139e2e0ee0bd99ff752bd223a403c3105941460fa7acc2a347a7c7e8b332f3307dc28a032a108095231c7de702f8008b1e6e3bd2f881989f09da69c47b5b5b42b5e8ec63a50f10efb6dd499ea43f345ce2808d63", 0x77}, {&(0x7f0000001000)="f47de5f1a17b1602cc0454bcc18dbbd947e86057a50844b5ebcbe249030a5799b359f17396146771647fd6e41b6b213450a53075f0fb9109fc71b6d333cf379f7fd098d56e15b6c64f38d96e15956f7b1b3f40b032e7b49be431cb352ff0", 0x5e}, {&(0x7f0000001080)="f074066146076c89c848c05bc29fba89bdd0381fa5a52a63327d959afda6c70dbf2325b9f1faf80cf186c9c2f1dff43a59", 0x31}, {&(0x7f00000010c0)="89a10ac616e3931231532dccf2a1d63974ea4fa518cc03a5a3a75cc4a25b46d49b537887482ca2920e79095b508a8fb67a854f1cdd087ee8a7f0ed602b92a2fc7dd9825045357e7d2a23d4712d84134403ec830d1668dca4303fb4ec84ee3ecce3800a61ad5ef371153ca7c75fa5df6c8995f91220678f5046e7c953a3fab97e369c0198cb084d784a35ab8498d90cb2a7", 0x91}, {&(0x7f0000001180)="3457b309947296b2b4aaf558b55652a9ad35278a505c56359d49828ac3523e011192323a4920c2ae2bee5ebb59384c3c8c088d43c0b5d929e2a63cdccb0448f83e5b43bf90114a822b26e10a89ba49e2473b521ea280e37cfca7a7addf91887f661464912a1363943dae67bd189a0d3e96122a97cb97a9494493b01dcdf6fd750fea759a377d89aee01c2ed0660b35d1c3a2d1d9", 0x94}, {&(0x7f0000001240)="c1f9b457287e3bd5d4642032a6bc632585c1c3361556edb682faa7b8e04a6bf2236a836e1a7d862e975d40738fea5f0d6fff641ccbc85f08bda90e8b1df0e2a3d2472aecab5c1f161effdb6dd32faf3c1cf332c8836f4ca65353667636fc098b10fb6ae26cb129cd7e5b560b7889cbcbcea016c00faba8550e03702aab8b2d12a08d1e6f71b4109908929999cd99604c0c13e6e826c9f8af20829ff5", 0x9c}], 0x8, &(0x7f0000001340)=[@op={0x10}, @iv={0x6c, 0x117, 0x2, 0x5c, "04509048c91aff9afcc18a3a4c452181ef13db885f4d1629c5a4739fbcf572fa1fc8b92b57bd40d6d088ad7198a33fe98ef9363a4734c9c992332c121d7c73dfe945180427bf0747b3e88af4c597d168db2e40451a66f539ae7923e7"}, @iv={0x10}], 0x8c, 0x8000}, {0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, &(0x7f0000002440)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @iv={0xb8, 0x117, 0x2, 0xa5, "0b92656b82b37c4d031276cf313fee799156b61e3baee865a055ad722d15b19b0b70ed2b648185e3946795c6dde35146851247fea4f23c77a6fbe62de42a406f9b35c036bacc949f7041d0fd206ee0324a912a44a2956b976186e9001f27ace8132c1212bfd08793563c6e22889965d621f9f801319b1458b01f2b808f5af7399590683c7d83f974ca376f201a76c898c4509d15473a14be584b741500e2da1680f67a924a"}, @op={0x10, 0x117, 0x3, 0x1}], 0xe8, 0x4000}, {0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002540)="8d44939d43cf60d57f49ae869ec8a975e750cb061a530a5c404f76fc8052eb576701cb46b24155b172ec8a8e94d1f4f2dc6a7a7889bf388368ef6c2092e4e16c5e09e3b9de6da2835cff044e435ebdbcec9e165cb931fb1325d818b4f5663bc6b27a271f2a96da10dd6280f357146c77383b92e242623c01df9abdee92537eede8e78a366d14afd14dd20f60cbfc82a503165c74873705880c14f4d24006e6db26fe04aa454e68db3c3a82d66fbf7be78d3579d344e200a1018a0fe6d8479f0b0c657f38230e373533ebf21c9fdec3eee9c7ba0701612dce8bf37a5f", 0xdc}, {&(0x7f0000002640)="228e6945ff9190d28769432a", 0xc}, {&(0x7f0000002680)="fbe4d7d87236dc1fad3e5128bb2660546a1985f6513ea96f97c6165ea56cdace64da94704cb2086f560c44702ea76637c57aba048c342e0a93228beff8390e1c89", 0x41}, {&(0x7f0000002700)="a98fc8e5d2b2ff951e30f7c59736afb48a220dc22da22b3a710862d5c7020611eae2f870160ea0a5ed2422018e0ea818f12427f320768783f25f48d674074500c79fa74ff432c61a9a572ab39e69d7de3f2a8693782cd00364385349ccda97e6b70c6ea419d5dc551359f4863c643e3cf62526b902a649b11f8737ac899a5874021721147fa7c9b6ccd98c8dfa29d0f2d6ce81b61015529c967fd304ab2191f0f9e7cde9ec1a87797005639d82b62a606db5ed2e45580ffa8fb020025fd9b62eda86cf8eb140689b8dbc80b0e4914f6f39f81fdd3fd4eb3a3ce83872133ba1194d8daccbf8302cec7f9f64dc0000efed216bde88fe", 0xf5}, {&(0x7f0000002800)}], 0x5, &(0x7f0000002880)=[@assoc={0x10, 0x117, 0x4, 0x20}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0xc6}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x7fffffff}], 0x50, 0x20000010}, {0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002900)="a907dee0b255479aaf2db1594695584e2b8ceccb77755f741e0c78325061c5fd7f73b2332ddc0910477ae1fc01671f50a82f291ea57ad35257c9eabf16e11b3c23f61d35b62be37aa0957a102775", 0x4e}], 0x1, &(0x7f00000029c0)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10}, @assoc={0x10, 0x117, 0x4, 0x200}, @assoc={0x10, 0x117, 0x4, 0x16}, @iv={0x44, 0x117, 0x2, 0x32, "6563d41830beb8efaf0f8b29d351f194081c2667fc7dba3aed96da3c02e64286cd87d4f5edf2b6526c03cdd0b707dd86d7bb"}], 0xa4, 0x40844}, {0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a80)="51709ce3002b1c1f091e7d28cae9c7a9f422cd0c578aa47eddd0631bc543b2b82e", 0x21}], 0x1, &(0x7f0000002b00)=[@iv={0x60, 0x117, 0x2, 0x4d, "157a1f8ad3083b9c98a82a14b11c37dd483b766915a496744779b1ffc82e176b2dba83d642ba46c5934cb79c08668b0586f592c4b245317aeba84c160b55dc51bd378e903b45e1d1b2a01060b3"}], 0x60, 0x24004090}], 0x8, 0x20008100) 05:27:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000a0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400000003f0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) [ 548.085191][T31815] binder_alloc: 31814: binder_alloc_buf, no vma 05:27:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d3bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 548.146001][T31815] binder: 31814:31815 ioctl c0306201 20000100 returned -14 05:27:14 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x3c) sendto$inet6(r3, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x18) 05:27:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000600900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000f00000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:27:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000b0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:14 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e3bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:27:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40ffffff9e0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:15 executing program 3: syz_emit_ethernet(0x86, &(0x7f0000000140)={@multicast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xac1414bb, @broadcast=0xe0000001}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "4acdbf0522fd6a5d805f1e4b834dfb00ea00285781970654cc75027b75617fc5", "3da9874f30c6f9e582c60e20a3d14f7d", {"a59ddfa0f017f669df95d97b19269e08", "479073560700d535802c60187fe308c3"}}}}}}}, 0x0) 05:27:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 05:27:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000400300000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000002b20900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f3bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000040)=@generic={0x3, 0x7, 0x5}) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/204, 0xbe}, {&(0x7f0000000180)=""/67, 0x43}, {&(0x7f0000000200)=""/169, 0xfffffee2}, {&(0x7f0000001180)=""/4091, 0xffb}], 0x4, 0x0) 05:27:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000000e0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 05:27:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0xff3d) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8}]}}]}, 0x38}}, 0x0) 05:27:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) 05:27:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40fffffff00900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000140000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000034000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000103bfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[]}}, 0x0) 05:27:15 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 05:27:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000f0ffff0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000190000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[]}}, 0x0) 05:27:15 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000003cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:15 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 05:27:15 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a407fffffff0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:15 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000fffff000000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000004c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[]}}, 0x0) 05:27:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a409effffff0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 549.552143][T31909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 05:27:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000600000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000013cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) [ 549.638984][T31909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.681472][T31909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:27:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40f0ffffff0900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:27:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c00000000006c0000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) [ 549.936888][T31935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 549.963144][T31935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 549.972481][T31935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 05:27:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000003c0)=0x774bc4) r2 = dup2(r1, r1) preadv(r2, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe4, 0x6, 0x21, 0x0, 0x0, 0x0, 0x10001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x204, 0x3}, 0x3521, 0x7, 0x6, 0x7, 0x1001, 0x9}, 0x0, 0x80000002, r2, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x3ce5}, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x4, 0xffffffffffff7fff}) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) 05:27:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000023cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000000300020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:27:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000f00000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000001000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) [ 550.136940][T31946] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 05:27:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000300000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010500000000"], 0x1}}, 0x0) 05:27:16 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000033cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000200000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000002000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000500000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:17 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x6000) 05:27:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010500000000"], 0x1}}, 0x0) 05:27:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000300000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000600000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000043cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000003000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a010500000000"], 0x1}}, 0x0) 05:27:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000400000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000700000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000053cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x200}}) 05:27:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000004000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30"], 0x1}}, 0x0) 05:27:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000a00000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000660800000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000063cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30"], 0x1}}, 0x0) 05:27:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000900000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:17 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="07536f87ff41f2f54d5fd8e26392bfd31207cfd0613c69bc9efb64a11b4849f97eff02990fd317a44c664894f8c534b5ba220bd0ee8215b3ccb0b9d03b17864b1f8ac56ba1e61c58a0c9e52ca6de19a5d287304501010029efb80dccfd0835f1a1dd3da5163b615c8acf2835b1ebfc8b580f0c74f26b3d0dc8c89110fbe622ed3ae2b940e3a0acb6f86122a59f8de82196f4b12de37050f637d353ccfcae9b22f4c914c95a20711ca68a4ef58efacde95c27dede54cc551079404b49cf4c565d3209", 0xc2}], 0x1) 05:27:17 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000e00000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:17 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000073cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30"], 0x1}}, 0x0) 05:27:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000a000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000a00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:18 executing program 3: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000003c0)=0x774bc4) r3 = dup2(r2, r2) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xe4, 0x6, 0x21, 0x7f, 0x0, 0x0, 0x10001, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x204, 0x3}, 0x3521, 0x7, 0x0, 0x7, 0x1001, 0x9, 0x408}, r1, 0x80000002, r3, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffbff, 0x3ce5}, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x7) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000000)=@generic={0x0, 0x4, 0xffffffffffff7fff}) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x6e) 05:27:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40001400000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a3000000000080003400000000114000000"], 0x1}}, 0x0) 05:27:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000083cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000b00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40006000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:18 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000000000000e000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a3000000000080003400000000114000000"], 0x1}}, 0x0) 05:27:18 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000c00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a3000000000080003400000000114000000"], 0x1}}, 0x0) 05:27:18 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000093cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000f000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:19 executing program 3: add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60a4f00800383a00fe80000e0000000000000000000000aaff02000000000000000000000000000101009078000000006053292e00002f0000000000000000000000000000000001fe800000000000000000000000c0ffffffffffffff234017"], 0x0) 05:27:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000e00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000"], 0x1}}, 0x0) 05:27:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000b202000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000014000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000a3cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000"], 0x1}}, 0x0) 05:27:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000003000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000001400000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x204) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="973d84f074d2af9777f0a731912f"], 0x3}, 0x1, 0x6c}, 0x0) r1 = memfd_create(&(0x7f0000000540)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf\x00\x00', 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setown(r1, 0x8, 0x0) execveat(r1, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) 05:27:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000b3cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000"], 0x1}}, 0x0) 05:27:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000008ed16b58000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000001900000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000000a000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df000000000000000000"], 0x1}}, 0x0) [ 552.992449][T32108] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. 05:27:19 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000c3cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:19 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df000000000000000000"], 0x1}}, 0x0) 05:27:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000004c00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000060000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000000e000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000100)=[{0x6}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 05:27:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df000000000000000000"], 0x1}}, 0x0) 05:27:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000d3cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000006000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000014000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000586bd18e000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000086600000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/126], 0x1}}, 0x0) 05:27:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a4000003f000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000e3cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000ffffff9e000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/126], 0x1}}, 0x0) 05:27:20 executing program 3: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x6, 0xfdc}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x6000) 05:27:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000060000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000006c00000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/126], 0x1}}, 0x0) 05:27:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000f3cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df000000000000fffffff0000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:20 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000103cfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400002b2000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/127], 0x1}}, 0x0) 05:27:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000000000f000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000f0ffff000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/127], 0x1}}, 0x0) 05:27:21 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) capget(&(0x7f0000007380)={0x19980330, r0}, &(0x7f00000073c0)) 05:27:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a400000f0000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) 05:27:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000004003000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000003dfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c000000004c000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df00"/127], 0x1}}, 0x0) [ 554.745967][T32248] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use) 05:27:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000340000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:21 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f0000013dfb12000100ac14141840d819a9060015000000", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 05:27:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df0000000000007fffffff000008000540000000280900010073797a300000000008000a40000000000900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") socket$nl_netfilter(0x10, 0x3, 0xc) 05:27:21 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) fremovexattr(r0, 0x0) 05:27:21 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x3c, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) 05:27:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000090ac9df00000000000000000000000008000540000000280900010073797a300000000008000a40000000001900020073797a3100000000080003400000000808000640ffffff00140000001100010000000000000000000000000a"], 0x74}}, 0x0) [ 555.001003][T32264] ================================================================== [ 555.009453][T32264] BUG: KASAN: double-free or invalid-free in nf_tables_newset+0x1ed6/0x2560 [ 555.018130][T32264] [ 555.020477][T32264] CPU: 1 PID: 32264 Comm: syz-executor.0 Not tainted 5.6.0-syzkaller #0 [ 555.028802][T32264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.038866][T32264] Call Trace: [ 555.042169][T32264] dump_stack+0x188/0x20d [ 555.046520][T32264] print_address_description.constprop.0.cold+0xd3/0x315 [ 555.053560][T32264] ? nf_tables_newset+0x1ed6/0x2560 [ 555.058782][T32264] kasan_report_invalid_free+0x61/0xa0 [ 555.064262][T32264] ? nf_tables_newset+0x1ed6/0x2560 [ 555.069497][T32264] __kasan_slab_free+0x129/0x140 [ 555.074451][T32264] ? nf_tables_newset+0x1ed6/0x2560 [ 555.079667][T32264] kfree+0x109/0x2b0 [ 555.083581][T32264] nf_tables_newset+0x1ed6/0x2560 [ 555.088652][T32264] ? lock_downgrade+0x840/0x840 [ 555.093517][T32264] ? nft_set_elem_expr_alloc+0x200/0x200 [ 555.099173][T32264] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 555.105106][T32264] ? __nla_parse+0x2e/0x60 [ 555.109540][T32264] nfnetlink_rcv_batch+0x83a/0x1610 [ 555.114775][T32264] ? nft_set_elem_expr_alloc+0x200/0x200 [ 555.121297][T32264] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 555.127131][T32264] ? lockdep_hardirqs_on+0x463/0x620 [ 555.132433][T32264] ? __dev_queue_xmit+0x174a/0x30a0 [ 555.137642][T32264] ? __local_bh_enable_ip+0x159/0x270 [ 555.143049][T32264] ? __nla_validate_parse+0x2af/0x1cd0 [ 555.148560][T32264] ? cap_capable+0x1eb/0x250 [ 555.153294][T32264] ? nla_memcpy+0xa0/0xa0 [ 555.157654][T32264] ? ns_capable_common+0xe2/0x100 [ 555.162692][T32264] ? __nla_parse+0x2e/0x60 [ 555.167131][T32264] nfnetlink_rcv+0x3af/0x420 [ 555.171749][T32264] ? nfnetlink_rcv_batch+0x1610/0x1610 [ 555.177952][T32264] netlink_unicast+0x537/0x740 [ 555.182736][T32264] ? netlink_attachskb+0x810/0x810 [ 555.188003][T32264] ? _copy_from_iter_full+0x25c/0x870 [ 555.193882][T32264] ? __phys_addr_symbol+0x2c/0x70 [ 555.198948][T32264] ? __check_object_size+0x171/0x437 [ 555.204260][T32264] netlink_sendmsg+0x882/0xe10 [ 555.209048][T32264] ? aa_af_perm+0x260/0x260 [ 555.213574][T32264] ? netlink_unicast+0x740/0x740 [ 555.218552][T32264] ? netlink_unicast+0x740/0x740 [ 555.223515][T32264] sock_sendmsg+0xcf/0x120 [ 555.227949][T32264] ____sys_sendmsg+0x6bf/0x7e0 [ 555.232737][T32264] ? get_compat_msghdr+0xd1/0x120 [ 555.237775][T32264] ? kernel_sendmsg+0x50/0x50 [ 555.242572][T32264] ___sys_sendmsg+0x100/0x170 [ 555.247783][T32264] ? sendmsg_copy_msghdr+0x70/0x70 [ 555.252917][T32264] ? __fget_files+0x32f/0x500 [ 555.257628][T32264] ? ksys_dup3+0x3c0/0x3c0 [ 555.262064][T32264] ? __fget_light+0x20e/0x270 [ 555.266805][T32264] __sys_sendmsg+0xec/0x1b0 [ 555.271326][T32264] ? __sys_sendmsg_sock+0xb0/0xb0 [ 555.276370][T32264] ? __ia32_sys_futex_time32+0x32a/0x494 [ 555.282166][T32264] ? trace_hardirqs_off_caller+0x55/0x230 [ 555.287907][T32264] ? do_fast_syscall_32+0xcc/0xe90 [ 555.293041][T32264] do_fast_syscall_32+0x270/0xe90 [ 555.298115][T32264] entry_SYSENTER_compat+0x70/0x7f [ 555.303261][T32264] [ 555.305943][T32264] Allocated by task 32264: [ 555.310396][T32264] save_stack+0x1b/0x80 [ 555.314569][T32264] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 555.320310][T32264] __kmalloc_track_caller+0x159/0x7a0 [ 555.325874][T32264] kvasprintf+0xb5/0x150 [ 555.330131][T32264] kasprintf+0xbb/0xf0 [ 555.334212][T32264] nf_tables_newset+0x1543/0x2560 [ 555.339248][T32264] nfnetlink_rcv_batch+0x83a/0x1610 [ 555.344455][T32264] nfnetlink_rcv+0x3af/0x420 [ 555.349318][T32264] netlink_unicast+0x537/0x740 [ 555.354102][T32264] netlink_sendmsg+0x882/0xe10 [ 555.358879][T32264] sock_sendmsg+0xcf/0x120 [ 555.363303][T32264] ____sys_sendmsg+0x6bf/0x7e0 [ 555.368078][T32264] ___sys_sendmsg+0x100/0x170 [ 555.373031][T32264] __sys_sendmsg+0xec/0x1b0 [ 555.377546][T32264] do_fast_syscall_32+0x270/0xe90 [ 555.382598][T32264] entry_SYSENTER_compat+0x70/0x7f [ 555.387723][T32264] [ 555.390059][T32264] Freed by task 32264: [ 555.394137][T32264] save_stack+0x1b/0x80 [ 555.398434][T32264] __kasan_slab_free+0xf7/0x140 [ 555.403297][T32264] kfree+0x109/0x2b0 [ 555.407199][T32264] nf_tables_newset+0x1f73/0x2560 [ 555.412373][T32264] nfnetlink_rcv_batch+0x83a/0x1610 [ 555.417589][T32264] nfnetlink_rcv+0x3af/0x420 [ 555.422194][T32264] netlink_unicast+0x537/0x740 [ 555.426969][T32264] netlink_sendmsg+0x882/0xe10 [ 555.431744][T32264] sock_sendmsg+0xcf/0x120 [ 555.436170][T32264] ____sys_sendmsg+0x6bf/0x7e0 [ 555.440943][T32264] ___sys_sendmsg+0x100/0x170 [ 555.445626][T32264] __sys_sendmsg+0xec/0x1b0 05:27:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x8, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100000001e6c0000000000fffff0000a20000000000a01000000000000000000000000000900010073797a300000000038000000120a0105000000000000000000000000040004800900020000397d00000000000900010073797a30000000000800034000000001140000001100df0000000000000000000000000a"], 0x80}}, 0x0) 05:27:21 executing program 2: r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) r1 = socket(0x11, 0x3, 0x1000004) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) bind(r1, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x102, 0x4) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8001000000913) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 555.450141][T32264] do_fast_syscall_32+0x270/0xe90 [ 555.455206][T32264] entry_SYSENTER_compat+0x70/0x7f [ 555.460317][T32264] [ 555.462649][T32264] The buggy address belongs to the object at ffff8880956f83c0 [ 555.462649][T32264] which belongs to the cache kmalloc-32 of size 32 [ 555.476536][T32264] The buggy address is located 0 bytes inside of [ 555.476536][T32264] 32-byte region [ffff8880956f83c0, ffff8880956f83e0) [ 555.489645][T32264] The buggy address belongs to the page: [ 555.495308][T32264] page:ffffea000255be00 refcount:1 mapcount:0 mapping:ffff8880aa0001c0 index:0xffff8880956f8fc1 [ 555.505735][T32264] flags: 0xfffe0000000200(slab) [ 555.510610][T32264] raw: 00fffe0000000200 ffffea00022e44c8 ffffea00027123c8 ffff8880aa0001c0 [ 555.519212][T32264] raw: ffff8880956f8fc1 ffff8880956f8000 0000000100000035 0000000000000000 [ 555.527825][T32264] page dumped because: kasan: bad access detected [ 555.534266][T32264] [ 555.536598][T32264] Memory state around the buggy address: [ 555.542234][T32264] ffff8880956f8280: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 555.550299][T32264] ffff8880956f8300: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 555.558361][T32264] >ffff8880956f8380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 555.566953][T32264] ^ [ 555.573159][T32264] ffff8880956f8400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 555.581207][T32264] ffff8880956f8480: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 555.589248][T32264] ================================================================== [ 555.597294][T32264] Disabling lock debugging due to kernel taint [ 555.603427][T32264] Kernel panic - not syncing: panic_on_warn set ... [ 555.610014][T32264] CPU: 1 PID: 32264 Comm: syz-executor.0 Tainted: G B 5.6.0-syzkaller #0 [ 555.619719][T32264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 555.629778][T32264] Call Trace: [ 555.633071][T32264] dump_stack+0x188/0x20d [ 555.637389][T32264] panic+0x2e3/0x75c [ 555.641279][T32264] ? add_taint.cold+0x16/0x16 [ 555.645955][T32264] ? print_shadow_for_address+0xb8/0x114 [ 555.651630][T32264] ? trace_hardirqs_off+0x50/0x220 [ 555.656775][T32264] ? nf_tables_newset+0x1ed6/0x2560 [ 555.661956][T32264] end_report+0x43/0x49 [ 555.666100][T32264] kasan_report_invalid_free+0x7d/0xa0 [ 555.671647][T32264] ? nf_tables_newset+0x1ed6/0x2560 [ 555.676857][T32264] __kasan_slab_free+0x129/0x140 [ 555.681829][T32264] ? nf_tables_newset+0x1ed6/0x2560 [ 555.687019][T32264] kfree+0x109/0x2b0 [ 555.690922][T32264] nf_tables_newset+0x1ed6/0x2560 [ 555.696036][T32264] ? lock_downgrade+0x840/0x840 [ 555.700884][T32264] ? nft_set_elem_expr_alloc+0x200/0x200 [ 555.706513][T32264] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 555.712407][T32264] ? __nla_parse+0x2e/0x60 [ 555.716862][T32264] nfnetlink_rcv_batch+0x83a/0x1610 [ 555.722171][T32264] ? nft_set_elem_expr_alloc+0x200/0x200 [ 555.727796][T32264] ? nfnetlink_subsys_register+0x2b0/0x2b0 [ 555.733623][T32264] ? lockdep_hardirqs_on+0x463/0x620 [ 555.738932][T32264] ? __dev_queue_xmit+0x174a/0x30a0 [ 555.744136][T32264] ? __local_bh_enable_ip+0x159/0x270 [ 555.749515][T32264] ? __nla_validate_parse+0x2af/0x1cd0 [ 555.754964][T32264] ? cap_capable+0x1eb/0x250 [ 555.759547][T32264] ? nla_memcpy+0xa0/0xa0 [ 555.763880][T32264] ? ns_capable_common+0xe2/0x100 [ 555.768897][T32264] ? __nla_parse+0x2e/0x60 [ 555.773310][T32264] nfnetlink_rcv+0x3af/0x420 [ 555.778021][T32264] ? nfnetlink_rcv_batch+0x1610/0x1610 [ 555.783502][T32264] netlink_unicast+0x537/0x740 [ 555.788330][T32264] ? netlink_attachskb+0x810/0x810 [ 555.793430][T32264] ? _copy_from_iter_full+0x25c/0x870 [ 555.798827][T32264] ? __phys_addr_symbol+0x2c/0x70 [ 555.803839][T32264] ? __check_object_size+0x171/0x437 [ 555.809124][T32264] netlink_sendmsg+0x882/0xe10 [ 555.813898][T32264] ? aa_af_perm+0x260/0x260 [ 555.818400][T32264] ? netlink_unicast+0x740/0x740 [ 555.823335][T32264] ? netlink_unicast+0x740/0x740 [ 555.828261][T32264] sock_sendmsg+0xcf/0x120 [ 555.832682][T32264] ____sys_sendmsg+0x6bf/0x7e0 [ 555.837458][T32264] ? get_compat_msghdr+0xd1/0x120 [ 555.842480][T32264] ? kernel_sendmsg+0x50/0x50 [ 555.847147][T32264] ___sys_sendmsg+0x100/0x170 [ 555.851809][T32264] ? sendmsg_copy_msghdr+0x70/0x70 [ 555.856914][T32264] ? __fget_files+0x32f/0x500 [ 555.861605][T32264] ? ksys_dup3+0x3c0/0x3c0 [ 555.866041][T32264] ? __fget_light+0x20e/0x270 [ 555.870723][T32264] __sys_sendmsg+0xec/0x1b0 [ 555.875208][T32264] ? __sys_sendmsg_sock+0xb0/0xb0 [ 555.880243][T32264] ? __ia32_sys_futex_time32+0x32a/0x494 [ 555.886010][T32264] ? trace_hardirqs_off_caller+0x55/0x230 [ 555.891925][T32264] ? do_fast_syscall_32+0xcc/0xe90 [ 555.897124][T32264] do_fast_syscall_32+0x270/0xe90 [ 555.902142][T32264] entry_SYSENTER_compat+0x70/0x7f [ 555.908834][T32264] Kernel Offset: disabled [ 555.913164][T32264] Rebooting in 86400 seconds..