c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:07 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 472.189660][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 472.231209][T10815] binder: BINDER_SET_CONTEXT_MGR already set [ 472.273045][T10815] binder: 10810:10815 ioctl 4018620d 20000080 returned -16 02:01:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 472.509717][T10828] binder: BINDER_SET_CONTEXT_MGR already set [ 472.547900][T10828] binder: 10825:10828 ioctl 4018620d 20000080 returned -16 02:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 472.766981][T10835] binder: BINDER_SET_CONTEXT_MGR already set [ 472.773344][T10835] binder: 10834:10835 ioctl 4018620d 20000080 returned -16 02:01:08 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:08 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="5c15b35ebb1a024a5297e2bcdea12deac3365ff54e794a435f89f9f82379c5fac01d1f2e3fb320f6408fb6767ee1a40450d9c145a750ede1af2a39107773f2d0230084dbbed51f04", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="1520bc3046de11480872d7e5a42a94dbb863587fd4b340dad981b78469a1b7fe1690bf39159bb87c8c79be1c44aac455f8e9c14578b89e330d8a698171bd46c132be87a470ff6cff", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:08 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 473.120538][T10845] binder: BINDER_SET_CONTEXT_MGR already set [ 473.126571][T10845] binder: 10838:10845 ioctl 4018620d 20000080 returned -16 02:01:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:09 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="5c15b35ebb1a024a5297e2bcdea12deac3365ff54e794a435f89f9f82379c5fac01d1f2e3fb320f6408fb6767ee1a40450d9c145a750ede1af2a39107773f2d0230084dbbed51f04", 0x0, 0x48) (async, rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="1520bc3046de11480872d7e5a42a94dbb863587fd4b340dad981b78469a1b7fe1690bf39159bb87c8c79be1c44aac455f8e9c14578b89e330d8a698171bd46c132be87a470ff6cff", 0x0, 0x48) (async, rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd384964", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) [ 473.326375][T10856] binder: BINDER_SET_CONTEXT_MGR already set [ 473.335496][T10856] binder: 10855:10856 ioctl 4018620d 20000080 returned -16 [ 473.395488][T10863] __nla_validate_parse: 6 callbacks suppressed [ 473.395510][T10863] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.455610][T10863] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:09 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:09 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000080)="5c15b35ebb1a024a5297e2bcdea12deac3365ff54e794a435f89f9f82379c5fac01d1f2e3fb320f6408fb6767ee1a40450d9c145a750ede1af2a39107773f2d0230084dbbed51f04", 0x0, 0x48) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000100)="1520bc3046de11480872d7e5a42a94dbb863587fd4b340dad981b78469a1b7fe1690bf39159bb87c8c79be1c44aac455f8e9c14578b89e330d8a698171bd46c132be87a470ff6cff", 0x0, 0x48) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (rerun: 32) 02:01:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd384964", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:09 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) creat(&(0x7f0000000000)='./file0\x00', 0x59) [ 474.004536][T10869] binder: BINDER_SET_CONTEXT_MGR already set [ 474.004820][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.021477][T10869] binder: 10864:10869 ioctl 4018620d 20000080 returned -16 02:01:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:09 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:10 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) creat(&(0x7f0000000000)='./file0\x00', 0x59) [ 474.131833][T10880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 474.163652][T10885] binder: BINDER_SET_CONTEXT_MGR already set [ 474.170026][T10885] binder: 10884:10885 ioctl 4018620d 20000080 returned -16 [ 474.284613][T10889] binder: BINDER_SET_CONTEXT_MGR already set [ 474.307100][T10889] binder: 10888:10889 ioctl 4018620d 20000080 returned -16 02:01:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:10 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:10 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async, rerun: 32) creat(&(0x7f0000000000)='./file0\x00', 0x59) (rerun: 32) 02:01:10 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd384964", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:10 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x2) r1 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 474.964041][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:10 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) [ 475.046717][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:10 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x2) (async) r1 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 475.247792][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 475.284930][T10922] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:11 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(0xffffffffffffffff) (async) r0 = dup(0xffffffffffffffff) ftruncate(r0, 0x2) r1 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r0, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:11 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) pwrite64(r1, &(0x7f0000000580)="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", 0x1000, 0x0) r2 = dup(r0) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 475.877349][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 475.959667][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:11 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) pwrite64(r1, &(0x7f0000000580)="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", 0x1000, 0x0) (async) r2 = dup(r0) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:11 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:12 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:12 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:12 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) pwrite64(r1, &(0x7f0000000580)="53b0939db5be585a5449344c85326fe34910099f071896a1543d4b1c054bae78da294c0f5904c6910c42423ccb04ae535cb2b19cc583f4c9291ffb1ad829a2e9a47bf98a8dde8c8f6d6c620372ee5bc4872d65d7800b7cd9aee1ca1c8855885b08141ccf0d1ace40f7f88ce3ce6b51f2b83de426024024d00bd1133a361448c1954c86b61f483fc11eb26983de6c30c495a6f9ff8a0152e5b42d15d5e78154a6f327e5974707e4437b4f884fc9de9552a05bfa342abcb20405778ddf0685fe1cd867ce131df017d7d91240ca965fcdec2addf6710869b1daa3549d70db3e886fc243337491d413c0fe29f3e592846ff56d0e50c994523c439c8367e1332f500e120883c53dd04d1417ada53c553851f633e23bba8eb91e4dce5a51b2375867c0f742e7b1c5ecebde64a875e22af7e1746b879c6772481e31450a0705abbb89a2ebe07f38d5f5d9f62f78c0c949a6676bd694c5bbe5a895e34a816938ce0e68bb63f2246b333ef30bdd39693e5a56dbcaf66f1ebf6ce83b9a085906dcb2ccd5d90aacb57adc9c8db861e4da1dc223cdaaf368d3d233ba2ac9e06bb43784fd882f2cc3e02825b6ddbf56f8c44d003b37634f056d089f303a5d55a6cb16482eea8a72fc0bc9464b3fb46d64eb0d860e2631469f1692b0e8137c23a6281b106fe4a103abdc91405134e07e1ba1fe8debb14882bc91fb569de6432b88b7910ba55090e2586a9a70070869981f9d40274d28de0d28bda17b437d67315ec168b7ae69bc4b20728fa4cd004a03d4c2cb7373083baac700d0014b1236f72d7e934c60e55d3c879f2afddd6c7919d6046b225e2a6cf66b42bdcd0c4bb900289d8510ec3eba1c6a317b7a3d02ea2d7fcdef6b3ef2b2cc6d922b84cadf484829566e8908cfb6f4427f77c4337a48dd4b96d2e1611f318bbc487afed166b7d85dffb247640d7225ecf260b0c04a9836426e2626e0c1105d919b6134a18f8ca120144ca389973f776cd57b226e713156e28a99829a20a2c757230d096b1b4a86809f2122cfd0bb7dcd5536dbefa9322f8c29078840347a48fcaa67929337e90d93f0887fe291a5706853d8033be06293b3d7816fa0f7f1ebdd8d9557220c0ee125fea4c626690146dc3cdb92931b5779722858c8849a939941917bf956a7a49fa1449d0afbe2ca7edd3b92a5150c105feb131117bc55536c8c51347d3a2109fd80b7379a726d3d757a30808d1b216267a565f2be62e2719d5724c034998ad1447e310447d3ffe9f5b31e57186fa943f0be0b80656a7d3b3d90a9f1c0e264bf53e551418e6a030b120bf41e70d7c7952f98274958afcfe406eba8d70845a3941a9f7b3d358f9b250381fdcf9f28ac6cc50a5e6ea37f548eaf952b41635e097a8a5dbe3c6558732b4e7dd2ffa997247d2f619e6145f079c323519f89f006b88a9de3c3ae04116f603e2925cf1d70538de2d1e0f1c4b745e1aadd70f2093d9936095eca20af592a6aedf6a7d4e097d77972cc3385b2ed58b0a15d6fecc3a5103ffea18e38c7ad269d3e76d3d1cd2e3625bf40a0d289bc4464860fd9922f8b593898177c1eb6684c38abd727c13b85a3b9289ac1df84c3517b65321bacc30b8253c0290e1ca0271e2d910fe7c98d35e38ea50749a5774f0ea9b1f58420a32aa5a1716e5158e14bc8bac3ddbaa7ce2d5c7d96575073a0b8d6fa7654c8c22bbb91c8becd1d38359769ec4e386622150b2fd014e78ee77b2841689395ac81997f70f5961c79e877723548d12e0def74dda6e6c521309f9d8589fee797f8d0d0104efcda2f14e5c653629eb016b150493b9eeecc0c09e98ec622cdf2d98a5971acfcf4aef61d847b5cf6bd4d7f5992617b6fef1893f74dbad0fcf2c11104b03ffce15efa11ee565482a8d67df6934adc6dd73fcb27a91778fb276e9ae8dd6665041843b9b0c920b41b61b4ccd9e8dccd10eeecec7098ecbead593816386c7fe4489385df273e8805eec49858a20dad3fdf63fcc6e881d6a13bbbb76f238be01f35da8330eaa554a05a1a8c87ed872935b03a058c84806914369e3447141137e2f03759fe4e8eebe60df54b74a7d456dd4c1df86d24c0dc9a1809064373f89bbca0dc744f46ebd6ba7a12371bb2edc4f143c260b4a19cdf53f5ae72d97a1fced2d89dfacb1762be09a1909b0adbb668a898a67e9401786d949637688a59eeba96edd0b88e484a3e782aec254eefa82a811d19c2fe0c65c003cfeaa65379c1bcf16af5fa4dd7d05da52dfb4b709310ae47637a11bf98733346cd46cc271c80845095f775228fd5ae29e85c6697bfb8fbd6b892fa149aa28ed7f9fc0c923dccf1196646f74ab6914845e918472fbd0c4d16bbc2065113acf1755e9e65f6c78ed1534f1f619e54214884c7d8fa2e42f5580f555b9ac3d0bc2e10e4bea19c6080b7b58fe9d31c09a236d2616f490b6fd64dbd85aa5ff4bf2e13ae38895b7e905398625fa0de227b406104b8469b162b3c86d09f2e817c99eb6326c924c32d9fd291ee97e434cf06f97e2a1baf71509322eefb2e5633511b8b0376e09b07f0d29de1233960644bb239ae04fe8286a1f07c03c5c6bee4a01d30c567ba927fbbfa7142a9f113b0de78f5dc333818bbd46169369a9850ba1b7d776ee32f2ce2e26864e1be96605540d37e3987a96cf7e3d86dcabfef83c4822c7964744bb64f3f221829a8d3ac40f0321e1deaceb6498cebd02d6c89565e8b42044c1841dbda58346e4c4af81abd173f6900741e341c5c89116b3e2a8feb88476b9944ac3672e30ba85a5d2799144a8df0704a72998b7b853c4ec7a37bd544b4f561e42c99858278eeba96510b89873348330172d1e1fd8c3d9378c55c66c6a352e29cbf70b5bea10c5cbbab225f6c21ed8bbd4056abb1b5c90841299c70b8506f0eb4c850f68662cb04de33875482e00771116c2b10afc5297b2e4132ce880c8fd4c60e05c6fa9a8b38a3a13b0d2a8bf3ea4079f1ae31a8bf62856c52c8517b5748d1e2abf136f32f3b0f37921cd27e3b811074cb36be98d00c796514f456b94112cfbe12f750d29303b78fa8120ccc6bf28e6170043ee84c9a47c195ab4c55f321edd5740ac24da8c1986283a3365b9fa979148d4c6e69e2b6b0c409d9558b73b0cebaeb5b39dd0e610035a0b17a5ef59582a112cd329b077f12ef21adaeed1bc86a467e2cc8487656b50d9ac68cd5fc3b4afc73c9438fc5047659575d9c3324bd92a0d8c7a88c5d91e39726fabbe7ecd6a975ba9ef7b3fa1bb11745e6302850fe707ce2f20c316c7e972afdb8795b86426f24125c655cb0898a88937c14b0f3b5aa9ac7aaa0025e8cdbce1f5449c96d938d0caa1bf136205cd8d223b7a715ef19b3643c1e4d043aaef969a122ce4bf982648053fc8559e12b69656ae3385d81b261ac7bbb095c7af446dac960a7906745115145b3e7ccd558ca7673482f3c92d2ad20e02bffb02af68c5a7274234132265a0591486b2c844259e81d9e20adca83d8a6f76fb4d24aa14c10194aadd3c4fa593bb2cf34a6a7cd5184f922ddf4c26ae038f052ef4bc4af52bf2f11e0cd0a069620900a189876e3df0b6c25089021157d26d7ccfdb1dc0ffc90166f9d063498dcc6bc3451b9f79bbb7282af4127813083dfe89daaa00e57424b2b907321989a7009085e77497f33211300416d6fbc6b6e09aa95d5531647da95121aaf5ce4f5287c7bc536de96d6513735e6f89cab0a53fdc268bdfe93dc07fa318fd894a1ac5a0910edd3160d7bd796da59723e59ae4bb577d95e505ec05ef1baedc43fcf931e8dbc2b8133d8a83579a8526c36652e5416173f4d730479fa05849ed42227d24b9ece12d4bf13b063df23c3f07b8a030906f6c73c9a67937aeb04ef1d5c2edaf7a3ddb60884dfc40660057003eee693b96b3202a1c7aa5f5df99606ee48e750cb503d2f3a3ce50b71e86a7c67d3eff7dc0a2a5358c05a0e4563afa281a8399b290a724536e0678dd4066a6bfa10b60353c722f5125f1bf7d15c23fd0d37bc04d195ad1a39b11f204663f8da7d8fe902e0ef36d0a6ee9f3440bcd98c1769aa0668e2d2ed259a588ca032f2ae4dd41a769500432451936f796e7831f0cde473557f0d9cba1cb81a44f44de161b7289311293cfc1d1f4095a5a6d54f54b5f980c8d35e11dd360fd9e848f16dce9db7f4792ee6375c2ddfbfb37754cef21cd9c9f23afe3209766ecfdc4b1dbc2bb3c33cdb3788bd1c170e6d0d190402f10ee9fdee845c027b201ec5d0f8e5cf3c4c9f0e9086735fe7128379259ed0c1ac016b34f7e5ff1f1acf762074d6d141c543811a9471ab7c3cdf65337266e35c8dbe99fa49fc6d53957fdd03b3f76201d0504c2b1242207926178082b39ded51173fbf0b103e0596569cb92d6c7bcb7e01f2d0a19c3dc1e79d65fd6071e07675d9a787967f2370fa4e691cd27f40ade2e21c397e272c3faed09f01aa551db6a190b5826df73c523594dd482e2bebf02772174f15f63567ab475a2a105d9020dd558350c2031b319a74669e73b6b9a617bcc37164eed17df3e6314c56b47e5a0b1d2b81ac1cf5a9ab6d3bc4b511eaac3bc68ec7e41ceffd67f008094bd7d77dad95c0557096e548759133248a45a3f45e7430689848a3fc3661cc7ede24c1b2d2937c1b322d1d439ee01aea2bae9f46232de36699880dfd3e6c8dd4f01a795a6f15e86a53663340be51fcf215965189a64c09489d034ff3348f30e6707d9ffb511f2c7f2623b61fd682abf7458814a25d55062652c47c7108381d46198a6511d16d49d9216ced7af122d94b09d1594af2dcac967f728a4ec3530fc32a18e2f04f648b56d4a8319e84e5b0068e7e5b87229ca06c85c0be5e4847f4f93f00870fee35a9d354e78be381e4f9794b57c189fa5ae56c53a3f25102416305d3b47392332e256d78cdd0a46b198189d9f6e6710959f146f8421d39cefc01aa3d23891c9d09ab011d632a8cb783a8224e3f24b9df65bd536699d3e16595d1c8c9311af248146eb1306ba7b5d96d71a66726152f816f4b7095601355a0ccbfda9ea3036d393f07ad58d4874007b5db5db13b38368523d924458beef05cd56069ff2f9b537bb5360737225f526f55adf6b769626f389ebe3b0fad961506e905241ce359d54f5fc03a1d38c49b8bd7ae3dbaef5ba7d714ee646d93186ab7d0870cbd70b5b6d8b076a6e07ce0dde443301277227be3c0a0b0b66816c9abc59c6632ba2c6bad9e615bac7cc4c655b5e4012165bacb0610e0054b7092a97380e7e15aea2bcd3662a2e27bec7714eda06c5e3684146155755067a494a50c7f740a1b2bdef7ad8801bedb5e3d349552ceab442fd62914b18fb458c0f752cbd5d311aeb880de5f020e62b6805682cb6e56cb34457f82d831ae0b86d39f02e99b9c0abac75ae681214cacf1f88d8b0abec3db9075ec89503e34c706ebca48d1ee300fbe263589b9e5cb45784abb2ad464828ff9eaaea223fac8ac1dcf50db1e96b43cd48b1a791c3403b5b9f0682df134f621d431d3bc2a7c0333c559c32b35020819ac9f583449cabdc07f42caa0d3d7bbb4c39da30ff95b03e1f913a9306f156c1529a090171ecd03ed1fd7da1e36a02e7093abbbcfcfc902a587ae71f836ce8dd32b1aabcbcc9c735ab927b85d0d9a965a32eb2c4476c0130e3962ee76c6d840af30894e6604b1b900a63b4dc64491652511aaaa3a7ecf25a22b611ffc93dd9ac2a584305d3802e63888ada783354db9cd8afa0f41675a5df4cf092449d4cdafbad107f9f2150b60d478fea070a754b41d", 0x1000, 0x0) r2 = dup(r0) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r1, 0x0, 0x0) (async) pwrite64(r1, &(0x7f0000000580)="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", 0x1000, 0x0) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee692", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee692", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:12 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee692", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 02:01:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 02:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:14 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:14 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000040)="83beba89ecd295983c9a6776f5dc63a6f8387e5b31668f09fcf37e83b92bb8532a727cffb4871341462f3d4b521b0fb58157d804e1366eaa64069b5f9b3fc26af3d4a33d1a20580d", 0x0, 0x48) 02:01:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 02:01:14 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) (async) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000040)="83beba89ecd295983c9a6776f5dc63a6f8387e5b31668f09fcf37e83b92bb8532a727cffb4871341462f3d4b521b0fb58157d804e1366eaa64069b5f9b3fc26af3d4a33d1a20580d", 0x0, 0x48) 02:01:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 478.586271][T11011] __nla_validate_parse: 10 callbacks suppressed [ 478.586295][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 478.603179][T11013] binder: 11006:11013 ioctl 4018620d 0 returned -22 02:01:14 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) [ 478.678821][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:14 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000040)="83beba89ecd295983c9a6776f5dc63a6f8387e5b31668f09fcf37e83b92bb8532a727cffb4871341462f3d4b521b0fb58157d804e1366eaa64069b5f9b3fc26af3d4a33d1a20580d", 0x0, 0x48) 02:01:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 478.745306][T11025] binder: 11023:11025 ioctl 4018620d 0 returned -22 [ 478.889698][T11033] binder: 11032:11033 ioctl 4018620d 0 returned -22 02:01:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) 02:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:15 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x0, 0x80010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 479.528116][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.554203][T11043] binder: BINDER_SET_CONTEXT_MGR already set [ 479.561973][T11043] binder: 11041:11043 ioctl 4018620d 20000080 returned -16 02:01:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) [ 479.619726][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 479.711479][T11051] binder: BINDER_SET_CONTEXT_MGR already set [ 479.737818][T11051] binder: 11050:11051 ioctl 4018620d 20000080 returned -16 02:01:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) 02:01:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 479.841719][T11056] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.869501][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:15 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) 02:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 480.132323][T11067] binder: 11066:11067 ioctl c0306201 0 returned -14 [ 480.175629][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:16 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) dup(r1) (async) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x0, 0x80010, r2, 0x0) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x0, 0x80010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 480.296105][T11070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180), 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:16 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0) 02:01:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 480.372929][T11072] binder: 11071:11072 ioctl c0306201 0 returned -14 [ 480.456994][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 480.481882][T11082] binder: 11081:11082 ioctl c0306201 0 returned -14 02:01:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000040)="83beba89ecd295983c9a6776f5dc63a6f8387e5b31668f09fcf37e83b92bb8532a727cffb4871341462f3d4b521b0fb58157d804e1366eaa64069b5f9b3fc26af3d4a33d1a20580d", 0x0, 0x48) [ 480.556400][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:16 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r4 = dup(r3) r5 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000040)="83beba89ecd295983c9a6776f5dc63a6f8387e5b31668f09fcf37e83b92bb8532a727cffb4871341462f3d4b521b0fb58157d804e1366eaa64069b5f9b3fc26af3d4a33d1a20580d", 0x0, 0x48) [ 480.724904][T11092] binder: BINDER_SET_CONTEXT_MGR already set [ 480.735390][T11092] binder: 11091:11092 ioctl 4018620d 20000080 returned -16 [ 480.760962][T11092] binder: 11091:11092 ioctl c0306201 20001480 returned -14 02:01:17 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x0, 0x80010, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:17 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 481.352001][T11103] binder: 11102:11103 ioctl c0306201 20001480 returned -14 02:01:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 481.466934][T11113] binder: 11112:11113 ioctl c0306201 20001480 returned -14 02:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 481.677303][T11122] binder: BINDER_SET_CONTEXT_MGR already set [ 481.683893][T11122] binder: 11121:11122 ioctl 4018620d 20000080 returned -16 [ 481.695067][T11122] binder: 11121:11122 unknown command 0 [ 481.704824][T11122] binder: 11121:11122 ioctl c0306201 20001480 returned -22 [ 481.742711][T11125] binder: BINDER_SET_CONTEXT_MGR already set [ 481.749036][T11125] binder: 11124:11125 ioctl 4018620d 20000080 returned -16 [ 481.915545][T11127] binder: 11126:11127 unknown command 0 [ 481.930585][T11127] binder: 11126:11127 ioctl c0306201 20001480 returned -22 02:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x3f8, 0xa0, 0x26c0, 0x10, 0x1, 0x6, 0xd, 0x0, {0x0, 0x13fb, 0x1}, {0xcfeb, 0x5, 0x1}, {0x2, 0x81}, {0xf8, 0x5, 0x1}, 0x1, 0x0, 0x6, 0x3, 0x1, 0x4d4, 0x1ff, 0x1, 0x5, 0x7ff, 0x9, 0x6, 0x20, 0x1, 0x1, 0x2}) r1 = dup(r0) r2 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/fb0\x00'}], 0xa, "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"}, 0x111) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xed, 0xa, 0xff, 0x81, 0xfff, 0x2, 0x5, 0x223, 0x2c7, 0x38, 0x90, 0x6, 0x400, 0x20, 0x1, 0xf1, 0x91d, 0x8}, [{0x4, 0x8, 0x979f, 0x3, 0x4, 0x2, 0x100, 0x5d3}, {0x3, 0xffffffff, 0x8, 0x4, 0x6, 0xffff8000, 0x1000, 0x1}], "6c905ea8efca4c52c71d77d4eab7d922de28fcd9b7a7d34e0964bfbc0916caa188e07e5fe0dbafd98536ac11c49401b9fbbbc8a2dc260e9fda5b74b245984a657b98f663d6793f69a3977dd6e6049160749e9beffc98167d89e82a0f6fe4095a26c9034064a863448b3d6d8b024df43fb9537d267ceae418530edf5fe698d65cb1c5bdbbdb5d3ce1c98d7cf056f5dee9a4c9a9786b78ce3bc7846a37a81c728a4e5478478cb1746791f24eb2f2657dab35b571e509cb8e575052f4dd3f4730b5beb9bffe9efd0900cde54af338692ab0737cf12e2a5c86803206e36d2bbb4b94", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb58) 02:01:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x3f8, 0xa0, 0x26c0, 0x10, 0x1, 0x6, 0xd, 0x0, {0x0, 0x13fb, 0x1}, {0xcfeb, 0x5, 0x1}, {0x2, 0x81}, {0xf8, 0x5, 0x1}, 0x1, 0x0, 0x6, 0x3, 0x1, 0x4d4, 0x1ff, 0x1, 0x5, 0x7ff, 0x9, 0x6, 0x20, 0x1, 0x1, 0x2}) r1 = dup(r0) r2 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/fb0\x00'}], 0xa, "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"}, 0x111) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xed, 0xa, 0xff, 0x81, 0xfff, 0x2, 0x5, 0x223, 0x2c7, 0x38, 0x90, 0x6, 0x400, 0x20, 0x1, 0xf1, 0x91d, 0x8}, [{0x4, 0x8, 0x979f, 0x3, 0x4, 0x2, 0x100, 0x5d3}, {0x3, 0xffffffff, 0x8, 0x4, 0x6, 0xffff8000, 0x1000, 0x1}], "6c905ea8efca4c52c71d77d4eab7d922de28fcd9b7a7d34e0964bfbc0916caa188e07e5fe0dbafd98536ac11c49401b9fbbbc8a2dc260e9fda5b74b245984a657b98f663d6793f69a3977dd6e6049160749e9beffc98167d89e82a0f6fe4095a26c9034064a863448b3d6d8b024df43fb9537d267ceae418530edf5fe698d65cb1c5bdbbdb5d3ce1c98d7cf056f5dee9a4c9a9786b78ce3bc7846a37a81c728a4e5478478cb1746791f24eb2f2657dab35b571e509cb8e575052f4dd3f4730b5beb9bffe9efd0900cde54af338692ab0737cf12e2a5c86803206e36d2bbb4b94", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb58) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x3f8, 0xa0, 0x26c0, 0x10, 0x1, 0x6, 0xd, 0x0, {0x0, 0x13fb, 0x1}, {0xcfeb, 0x5, 0x1}, {0x2, 0x81}, {0xf8, 0x5, 0x1}, 0x1, 0x0, 0x6, 0x3, 0x1, 0x4d4, 0x1ff, 0x1, 0x5, 0x7ff, 0x9, 0x6, 0x20, 0x1, 0x1, 0x2}) (async) dup(r0) (async) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) (async) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/fb0\x00'}], 0xa, "ae4229ff2ecd1185799ad355f7c028d2b1a75d6dce0b3a407df8420b370b9cc59c749882d3c7117292fc3af16e60064412438c36363aa193e69f9118ecee4d4936a0d47ddfb7782bbc7077f50c16402a8a0ef8a0e7e3bb11a166fff7538443678948ad8987fdb68bcee8efe1fa604d29197556051c30a02c4e4664405834a749b9ab443287959bf3ab499e0b598f676ad72cb722e884cfd66fe733d6392aa5fe61ae89f22ef23a430f4d678501546680105919dc33bc6e310720be7491320f5786a16395004bc2a29a06527a7109852830fb378bcdc834fb9e17855d8670daa4a89fc2a41b2f5ae0083b8a5060b1ff23b5319c638c3bc08e08301156"}, 0x111) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) socket$pptp(0x18, 0x1, 0x2) (async) bind$pptp(r4, 0x0, 0x0) (async) write$binfmt_elf32(r4, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xed, 0xa, 0xff, 0x81, 0xfff, 0x2, 0x5, 0x223, 0x2c7, 0x38, 0x90, 0x6, 0x400, 0x20, 0x1, 0xf1, 0x91d, 0x8}, [{0x4, 0x8, 0x979f, 0x3, 0x4, 0x2, 0x100, 0x5d3}, {0x3, 0xffffffff, 0x8, 0x4, 0x6, 0xffff8000, 0x1000, 0x1}], "6c905ea8efca4c52c71d77d4eab7d922de28fcd9b7a7d34e0964bfbc0916caa188e07e5fe0dbafd98536ac11c49401b9fbbbc8a2dc260e9fda5b74b245984a657b98f663d6793f69a3977dd6e6049160749e9beffc98167d89e82a0f6fe4095a26c9034064a863448b3d6d8b024df43fb9537d267ceae418530edf5fe698d65cb1c5bdbbdb5d3ce1c98d7cf056f5dee9a4c9a9786b78ce3bc7846a37a81c728a4e5478478cb1746791f24eb2f2657dab35b571e509cb8e575052f4dd3f4730b5beb9bffe9efd0900cde54af338692ab0737cf12e2a5c86803206e36d2bbb4b94", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb58) (async) 02:01:18 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x3f8, 0xa0, 0x26c0, 0x10, 0x1, 0x6, 0xd, 0x0, {0x0, 0x13fb, 0x1}, {0xcfeb, 0x5, 0x1}, {0x2, 0x81}, {0xf8, 0x5, 0x1}, 0x1, 0x0, 0x6, 0x3, 0x1, 0x4d4, 0x1ff, 0x1, 0x5, 0x7ff, 0x9, 0x6, 0x20, 0x1, 0x1, 0x2}) r1 = dup(r0) signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) (async) r2 = signalfd4(r0, &(0x7f0000000000), 0x8, 0x80800) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/fb0\x00'}], 0xa, "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"}, 0x111) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) write$binfmt_elf32(r4, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xed, 0xa, 0xff, 0x81, 0xfff, 0x2, 0x5, 0x223, 0x2c7, 0x38, 0x90, 0x6, 0x400, 0x20, 0x1, 0xf1, 0x91d, 0x8}, [{0x4, 0x8, 0x979f, 0x3, 0x4, 0x2, 0x100, 0x5d3}, {0x3, 0xffffffff, 0x8, 0x4, 0x6, 0xffff8000, 0x1000, 0x1}], "6c905ea8efca4c52c71d77d4eab7d922de28fcd9b7a7d34e0964bfbc0916caa188e07e5fe0dbafd98536ac11c49401b9fbbbc8a2dc260e9fda5b74b245984a657b98f663d6793f69a3977dd6e6049160749e9beffc98167d89e82a0f6fe4095a26c9034064a863448b3d6d8b024df43fb9537d267ceae418530edf5fe698d65cb1c5bdbbdb5d3ce1c98d7cf056f5dee9a4c9a9786b78ce3bc7846a37a81c728a4e5478478cb1746791f24eb2f2657dab35b571e509cb8e575052f4dd3f4730b5beb9bffe9efd0900cde54af338692ab0737cf12e2a5c86803206e36d2bbb4b94", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb58) 02:01:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 482.333291][T11142] binder: 11135:11142 unknown command 0 [ 482.352067][T11142] binder: 11135:11142 ioctl c0306201 20001480 returned -22 02:01:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(r0, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:18 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x400, 0x640, 0x300, 0x258, 0xfffffff9, 0x5, 0x10, 0x0, {0x7}, {0x200, 0x6, 0x1}, {0x0, 0x1f}, {0x2, 0x80000001, 0x1}, 0x0, 0x100, 0x648a, 0x80000011, 0x0, 0x85, 0x4, 0x20, 0x8, 0x4, 0x7, 0x5, 0x4, 0x1, 0x0, 0x4}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0xd000, 0x100000}) 02:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 482.572396][T11154] binder: BINDER_SET_CONTEXT_MGR already set [ 482.609874][T11158] binder: BINDER_SET_CONTEXT_MGR already set [ 482.628763][T11154] binder: 11152:11154 ioctl 4018620d 20000080 returned -16 [ 482.643651][T11158] binder: 11157:11158 ioctl 4018620d 20000080 returned -16 02:01:18 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 482.702431][T11164] binder: 11157:11164 unknown command 0 02:01:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 482.770261][T11164] binder: 11157:11164 ioctl c0306201 20001480 returned -22 02:01:18 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 483.139680][T11179] binder: BINDER_SET_CONTEXT_MGR already set [ 483.175683][T11179] binder: 11175:11179 ioctl 4018620d 20000080 returned -16 02:01:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 483.268658][T11182] binder: 11175:11182 unknown command 0 [ 483.322821][T11182] binder: 11175:11182 ioctl c0306201 20001480 returned -22 02:01:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async, rerun: 32) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) (rerun: 32) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x400, 0x640, 0x300, 0x258, 0xfffffff9, 0x5, 0x10, 0x0, {0x7}, {0x200, 0x6, 0x1}, {0x0, 0x1f}, {0x2, 0x80000001, 0x1}, 0x0, 0x100, 0x648a, 0x80000011, 0x0, 0x85, 0x4, 0x20, 0x8, 0x4, 0x7, 0x5, 0x4, 0x1, 0x0, 0x4}) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async, rerun: 32) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0xd000, 0x100000}) 02:01:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69a"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 483.453682][T11190] binder: 11189:11190 unknown command 0 [ 483.459433][T11190] binder: 11189:11190 ioctl c0306201 20001480 returned -22 02:01:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async, rerun: 32) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) (rerun: 32) ioctl$FBIOPAN_DISPLAY(r3, 0x4606, &(0x7f0000000040)={0x400, 0x640, 0x300, 0x258, 0xfffffff9, 0x5, 0x10, 0x0, {0x7}, {0x200, 0x6, 0x1}, {0x0, 0x1f}, {0x2, 0x80000001, 0x1}, 0x0, 0x100, 0x648a, 0x80000011, 0x0, 0x85, 0x4, 0x20, 0x8, 0x4, 0x7, 0x5, 0x4, 0x1, 0x0, 0x4}) (async, rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async, rerun: 32) r4 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) (async, rerun: 32) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000100)={0xd000, 0x100000}) 02:01:19 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a383505b61de5f825f91b897a00", 0x0, 0x48) [ 483.625455][T11198] __nla_validate_parse: 16 callbacks suppressed [ 483.625476][T11198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.656677][T11200] binder: BINDER_SET_CONTEXT_MGR already set 02:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69a"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 483.686518][T11200] binder: 11197:11200 ioctl 4018620d 20000080 returned -16 [ 483.687235][T11198] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.706244][T11200] binder: 11197:11200 unknown command 25349 [ 483.726847][T11200] binder: 11197:11200 ioctl c0306201 20001480 returned -22 02:01:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 1) 02:01:19 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2000001, 0x100010, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 483.836336][T11214] FAULT_INJECTION: forcing a failure. [ 483.836336][T11214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.850720][T11214] CPU: 0 PID: 11214 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 483.860839][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 483.870938][T11214] Call Trace: [ 483.874252][T11214] [ 483.877218][T11214] dump_stack_lvl+0x125/0x1b0 [ 483.881953][T11214] should_fail_ex+0x496/0x5b0 02:01:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:19 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 483.886695][T11214] copyin+0x1b/0xa0 [ 483.890579][T11214] _copy_from_iter+0x1e5/0x1270 [ 483.895479][T11214] ? ref_tracker_free+0x810/0x810 [ 483.900574][T11214] ? rcu_is_watching+0x12/0xb0 [ 483.905380][T11214] ? lock_release+0x4bf/0x680 [ 483.910114][T11214] ? packet_cached_dev_get+0x13a/0x320 [ 483.915702][T11214] ? iov_iter_extract_pages+0x1870/0x1870 [ 483.921491][T11214] ? aa_profile_af_perm+0x470/0x470 [ 483.924224][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.926728][T11214] packet_sendmsg+0x1ac7/0x5570 [ 483.940908][T11214] ? rcu_is_watching+0x12/0xb0 [ 483.945864][T11214] ? preempt_count_sub+0x150/0x150 [ 483.951005][T11214] ? lock_release+0x4bf/0x680 [ 483.955708][T11214] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 483.961642][T11214] ? aa_sk_perm+0x2c1/0xae0 [ 483.966169][T11214] ? get_pid_task+0xeb/0x250 [ 483.970799][T11214] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 483.976811][T11214] ? aa_af_perm+0x260/0x260 [ 483.981358][T11214] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 483.986752][T11214] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 483.992686][T11214] sock_sendmsg+0xd9/0x180 [ 483.997199][T11214] __sys_sendto+0x255/0x340 [ 484.001740][T11214] ? __ia32_sys_getpeername+0xb0/0xb0 [ 484.007138][T11214] ? vfs_write+0x14c/0xe40 [ 484.011591][T11214] ? __fget_files+0x279/0x410 [ 484.016297][T11214] ? ksys_write+0x1a7/0x250 [ 484.020905][T11214] ? __ia32_sys_read+0xb0/0xb0 [ 484.025777][T11214] __x64_sys_sendto+0xe0/0x1b0 [ 484.030559][T11214] ? syscall_enter_from_user_mode+0x26/0x80 [ 484.036478][T11214] do_syscall_64+0x38/0xb0 [ 484.040934][T11214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 484.046939][T11214] RIP: 0033:0x7fca7227cae9 [ 484.051368][T11214] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 484.070998][T11214] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.079438][T11214] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 484.087443][T11214] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 484.095432][T11214] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 484.103418][T11214] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 484.111405][T11214] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 484.119408][T11214] 02:01:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 2) 02:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69a"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 484.209844][T11223] binder: 11222:11223 unknown command 25349 [ 484.216772][T11216] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.236607][T11223] binder: 11222:11223 ioctl c0306201 20001480 returned -22 02:01:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2000001, 0x100010, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 484.342442][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x2000001, 0x100010, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 484.417479][T11237] binder: 11236:11237 unknown command 25349 [ 484.446967][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 484.477314][T11237] binder: 11236:11237 ioctl c0306201 20001480 returned -22 [ 484.497198][T11239] FAULT_INJECTION: forcing a failure. [ 484.497198][T11239] name failslab, interval 1, probability 0, space 0, times 0 [ 484.522836][T11239] CPU: 1 PID: 11239 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 484.532965][T11239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 484.543049][T11239] Call Trace: [ 484.546363][T11239] [ 484.549328][T11239] dump_stack_lvl+0x125/0x1b0 [ 484.554062][T11239] should_fail_ex+0x496/0x5b0 [ 484.558806][T11239] should_failslab+0x9/0x20 [ 484.563468][T11239] kmem_cache_alloc_node+0x389/0x3f0 [ 484.568820][T11239] ? __alloc_skb+0x287/0x330 [ 484.573568][T11239] __alloc_skb+0x287/0x330 02:01:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:20 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235008000000f3066baf80cb8ac5e048eef66bafc0cb80d000000ef0f01310f21e6f20f2d2f66660f388080fa7f000064660fdb009a0f0000802e00660f3881b38e9c18f166ba2000ed", 0x50}], 0x1, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4c3455fa80f0000000cc4c2ad4597f2350000c4c251938c21c9d900002e0f20a466ba6100b088eef4b907090000b802000000ba000000000f30b8010000000f01d90f092e0f23d9", 0x48}], 0x1, 0xd, &(0x7f0000000100), 0x0) r8 = dup2(r5, r5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$FBIOBLANK(r9, 0x4611, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001d00)) r10 = mmap$KVM_VCPU(&(0x7f000000c000/0x2000)=nil, 0x930, 0x2000002, 0x10, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 484.578054][T11239] ? __napi_build_skb+0x50/0x50 [ 484.582981][T11239] ? rcu_is_watching+0x12/0xb0 [ 484.587785][T11239] ? lock_release+0x4bf/0x680 [ 484.592534][T11239] ? __might_fault+0xe5/0x190 [ 484.597268][T11239] ? reacquire_held_locks+0x4b0/0x4b0 [ 484.602693][T11239] ? lock_sync+0x190/0x190 [ 484.607161][T11239] ? page_ext_put+0x2b/0xd0 [ 484.611731][T11239] alloc_skb_with_frags+0xe4/0x710 [ 484.616910][T11239] sock_alloc_send_pskb+0x7c8/0x950 [ 484.622186][T11239] ? sock_wmalloc+0x120/0x120 [ 484.626932][T11239] ? aa_profile_af_perm+0x470/0x470 [ 484.632190][T11239] packet_sendmsg+0x1e47/0x5570 [ 484.637120][T11239] ? preempt_count_sub+0x150/0x150 [ 484.642297][T11239] ? lock_release+0x4bf/0x680 [ 484.647048][T11239] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 484.653025][T11239] ? aa_sk_perm+0x2c1/0xae0 [ 484.656810][T11253] binder: BINDER_SET_CONTEXT_MGR already set [ 484.657544][T11239] ? get_pid_task+0xeb/0x250 [ 484.657594][T11239] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 484.663864][T11253] binder: 11252:11253 ioctl 4018620d 20000080 returned -16 [ 484.668141][T11239] ? aa_af_perm+0x260/0x260 [ 484.668182][T11239] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 484.668228][T11239] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 484.668275][T11239] sock_sendmsg+0xd9/0x180 [ 484.668326][T11239] __sys_sendto+0x255/0x340 [ 484.668357][T11239] ? __ia32_sys_getpeername+0xb0/0xb0 [ 484.668388][T11239] ? vfs_write+0x14c/0xe40 [ 484.668429][T11239] ? __fget_files+0x279/0x410 [ 484.686720][T11253] binder: 11252:11253 unknown command 287493 02:01:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 484.691273][T11239] ? ksys_write+0x1a7/0x250 [ 484.691328][T11239] ? __ia32_sys_read+0xb0/0xb0 [ 484.691366][T11239] __x64_sys_sendto+0xe0/0x1b0 [ 484.698096][T11253] binder: 11252:11253 ioctl c0306201 20001480 returned -22 [ 484.701656][T11239] ? syscall_enter_from_user_mode+0x26/0x80 [ 484.701708][T11239] do_syscall_64+0x38/0xb0 [ 484.758346][T11239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 484.764322][T11239] RIP: 0033:0x7fca7227cae9 [ 484.768806][T11239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 484.788638][T11239] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.797100][T11239] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 484.799129][T11255] binder: 11254:11255 unknown command 287493 [ 484.805100][T11239] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 484.805125][T11239] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff 02:01:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 3) 02:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 484.805147][T11239] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 484.805168][T11239] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 484.811347][T11255] binder: 11254:11255 ioctl c0306201 20001480 returned -22 [ 484.819133][T11239] 02:01:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:20 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:20 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 4) [ 484.973623][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 485.059100][T11267] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 485.116811][T11276] binder: 11272:11276 unknown command 287493 [ 485.123562][T11276] binder: 11272:11276 ioctl c0306201 20001480 returned -22 [ 485.177301][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.183122][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.188904][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.194896][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.200831][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.206576][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.212370][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.218095][T11280] protocol 894f is buggy, dev ip6gretap0 [ 485.223849][T11280] protocol 894f is buggy, dev ip6gretap0 02:01:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 5) [ 485.264502][T11283] binder_alloc: 11282: binder_alloc_buf, no vma 02:01:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:21 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235008000000f3066baf80cb8ac5e048eef66bafc0cb80d000000ef0f01310f21e6f20f2d2f66660f388080fa7f000064660fdb009a0f0000802e00660f3881b38e9c18f166ba2000ed", 0x50}], 0x1, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4c3455fa80f0000000cc4c2ad4597f2350000c4c251938c21c9d900002e0f20a466ba6100b088eef4b907090000b802000000ba000000000f30b8010000000f01d90f092e0f23d9", 0x48}], 0x1, 0xd, &(0x7f0000000100), 0x0) r8 = dup2(r5, r5) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$FBIOBLANK(r9, 0x4611, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001d00)) (async) r10 = mmap$KVM_VCPU(&(0x7f000000c000/0x2000)=nil, 0x930, 0x2000002, 0x10, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 485.308845][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.373962][T11287] FAULT_INJECTION: forcing a failure. [ 485.373962][T11287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 485.407614][T11291] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.412754][T11287] CPU: 0 PID: 11287 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 485.427046][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 485.437132][T11287] Call Trace: [ 485.440428][T11287] [ 485.443369][T11287] dump_stack_lvl+0x125/0x1b0 [ 485.448075][T11287] should_fail_ex+0x496/0x5b0 [ 485.452787][T11287] __should_fail_alloc_page+0xe7/0x130 [ 485.458389][T11287] prepare_alloc_pages.constprop.0+0x16f/0x550 [ 485.464612][T11287] __alloc_pages+0x14e/0x4a0 [ 485.469233][T11287] ? __alloc_pages_slowpath.constprop.0+0x2360/0x2360 [ 485.476048][T11287] ? __build_skb_around+0x278/0x3b0 [ 485.481307][T11287] ? __napi_build_skb+0x50/0x50 [ 485.486214][T11287] ? rcu_is_watching+0x12/0xb0 [ 485.491000][T11287] ? lock_release+0x4bf/0x680 [ 485.495716][T11287] ? __might_fault+0xe5/0x190 [ 485.500443][T11287] alloc_pages+0x1a9/0x270 [ 485.504921][T11287] alloc_skb_with_frags+0x24b/0x710 [ 485.510158][T11287] sock_alloc_send_pskb+0x7c8/0x950 [ 485.515429][T11287] ? sock_wmalloc+0x120/0x120 [ 485.520145][T11287] ? aa_profile_af_perm+0x470/0x470 [ 485.525375][T11287] packet_sendmsg+0x1e47/0x5570 [ 485.530275][T11287] ? preempt_count_sub+0x150/0x150 [ 485.535423][T11287] ? lock_release+0x4bf/0x680 [ 485.540128][T11287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 485.546242][T11287] ? aa_sk_perm+0x2c1/0xae0 [ 485.550772][T11287] ? get_pid_task+0xeb/0x250 [ 485.555421][T11287] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 485.561346][T11287] ? aa_af_perm+0x260/0x260 [ 485.565884][T11287] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 485.571208][T11287] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 485.577142][T11287] sock_sendmsg+0xd9/0x180 [ 485.582578][T11287] __sys_sendto+0x255/0x340 [ 485.587117][T11287] ? __ia32_sys_getpeername+0xb0/0xb0 [ 485.592534][T11287] ? vfs_write+0x14c/0xe40 [ 485.596975][T11287] ? __fget_files+0x279/0x410 [ 485.601684][T11287] ? ksys_write+0x1a7/0x250 [ 485.606295][T11287] ? __ia32_sys_read+0xb0/0xb0 [ 485.611077][T11287] __x64_sys_sendto+0xe0/0x1b0 [ 485.615861][T11287] ? syscall_enter_from_user_mode+0x26/0x80 [ 485.621781][T11287] do_syscall_64+0x38/0xb0 [ 485.626221][T11287] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 485.632159][T11287] RIP: 0033:0x7fca7227cae9 [ 485.636590][T11287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 485.656213][T11287] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 485.664642][T11287] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 485.672628][T11287] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 485.680625][T11287] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 485.688618][T11287] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 485.696612][T11287] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 485.704614][T11287] 02:01:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 485.721099][T11295] binder: BINDER_SET_CONTEXT_MGR already set [ 485.735950][T11295] binder: 11290:11295 ioctl 4018620d 20000080 returned -16 [ 485.756769][T11294] protocol 894f is buggy, dev ip6gretap0 02:01:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 6) 02:01:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 485.876633][T11306] FAULT_INJECTION: forcing a failure. [ 485.876633][T11306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.910646][T11306] CPU: 0 PID: 11306 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 485.920783][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 485.930872][T11306] Call Trace: [ 485.934186][T11306] [ 485.937152][T11306] dump_stack_lvl+0x125/0x1b0 [ 485.941891][T11306] should_fail_ex+0x496/0x5b0 [ 485.946640][T11306] ? lock_release+0x4bf/0x680 [ 485.951382][T11306] copyin+0x1b/0xa0 [ 485.953258][T11313] binder_alloc: 11310: binder_alloc_buf, no vma [ 485.955226][T11306] _copy_from_iter+0x1e5/0x1270 [ 485.955275][T11306] ? skb_set_owner_w+0x29f/0x460 [ 485.971541][T11306] ? sock_alloc_send_pskb+0x72b/0x950 02:01:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 485.977148][T11306] ? iov_iter_extract_pages+0x1870/0x1870 [ 485.983021][T11306] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 485.988985][T11306] ? __virt_addr_valid+0x5e/0x2d0 [ 485.994064][T11306] ? __phys_addr_symbol+0x30/0x70 [ 485.999148][T11306] ? __check_object_size+0x323/0x730 [ 486.004584][T11306] skb_copy_datagram_from_iter+0x121/0x6b0 [ 486.010489][T11306] packet_sendmsg+0x2066/0x5570 [ 486.015430][T11306] ? preempt_count_sub+0x150/0x150 [ 486.020621][T11306] ? lock_release+0x4bf/0x680 [ 486.025359][T11306] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.031341][T11306] ? aa_sk_perm+0x2c1/0xae0 [ 486.035892][T11306] ? get_pid_task+0xeb/0x250 [ 486.040546][T11306] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 486.046528][T11306] ? aa_af_perm+0x260/0x260 [ 486.051082][T11306] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.056435][T11306] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 486.062399][T11306] sock_sendmsg+0xd9/0x180 [ 486.066879][T11306] __sys_sendto+0x255/0x340 [ 486.071435][T11306] ? __ia32_sys_getpeername+0xb0/0xb0 02:01:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 486.076868][T11306] ? vfs_write+0x14c/0xe40 [ 486.081372][T11306] ? __fget_files+0x279/0x410 [ 486.086194][T11306] ? ksys_write+0x1a7/0x250 [ 486.090752][T11306] ? __ia32_sys_read+0xb0/0xb0 [ 486.095577][T11306] __x64_sys_sendto+0xe0/0x1b0 [ 486.100399][T11306] ? syscall_enter_from_user_mode+0x26/0x80 [ 486.106365][T11306] do_syscall_64+0x38/0xb0 [ 486.110831][T11306] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.116779][T11306] RIP: 0033:0x7fca7227cae9 [ 486.121240][T11306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.140897][T11306] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 486.149369][T11306] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 486.157391][T11306] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 486.165399][T11306] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 486.173420][T11306] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 486.181436][T11306] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 486.189467][T11306] 02:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc43"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="b9800000c00f3235008000000f3066baf80cb8ac5e048eef66bafc0cb80d000000ef0f01310f21e6f20f2d2f66660f388080fa7f000064660fdb009a0f0000802e00660f3881b38e9c18f166ba2000ed", 0x50}], 0x1, 0x83, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(r7, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4c3455fa80f0000000cc4c2ad4597f2350000c4c251938c21c9d900002e0f20a466ba6100b088eef4b907090000b802000000ba000000000f30b8010000000f01d90f092e0f23d9", 0x48}], 0x1, 0xd, &(0x7f0000000100), 0x0) (async, rerun: 32) r8 = dup2(r5, r5) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$FBIOBLANK(r9, 0x4611, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000001d00)) (async) r10 = mmap$KVM_VCPU(&(0x7f000000c000/0x2000)=nil, 0x930, 0x2000002, 0x10, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 7) [ 486.429353][T11331] FAULT_INJECTION: forcing a failure. [ 486.429353][T11331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.454086][T11331] CPU: 1 PID: 11331 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 486.464260][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 486.474358][T11331] Call Trace: 02:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc43"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 486.477676][T11331] [ 486.480642][T11331] dump_stack_lvl+0x125/0x1b0 [ 486.485382][T11331] should_fail_ex+0x496/0x5b0 [ 486.490134][T11331] copyin+0x1b/0xa0 [ 486.494006][T11331] _copy_from_iter+0x1e5/0x1270 [ 486.498919][T11331] ? _copy_from_iter+0x256/0x1270 [ 486.503996][T11331] ? iov_iter_extract_pages+0x1870/0x1870 [ 486.509773][T11331] ? sock_alloc_send_pskb+0x72b/0x950 [ 486.515208][T11331] ? iov_iter_extract_pages+0x1870/0x1870 [ 486.520993][T11331] copy_page_from_iter+0xa5/0x120 [ 486.526085][T11331] skb_copy_datagram_from_iter+0x41d/0x6b0 [ 486.531963][T11331] packet_sendmsg+0x2066/0x5570 [ 486.536890][T11331] ? preempt_count_sub+0x150/0x150 [ 486.542073][T11331] ? lock_release+0x4bf/0x680 [ 486.546822][T11331] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.552804][T11331] ? aa_sk_perm+0x2c1/0xae0 [ 486.557356][T11331] ? get_pid_task+0xeb/0x250 [ 486.562018][T11331] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 486.567988][T11331] ? aa_af_perm+0x260/0x260 [ 486.572550][T11331] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 486.577885][T11331] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 486.583823][T11331] sock_sendmsg+0xd9/0x180 [ 486.587719][T11341] binder: 11339:11341 ioctl c0306201 0 returned -14 [ 486.588278][T11331] __sys_sendto+0x255/0x340 [ 486.588315][T11331] ? __ia32_sys_getpeername+0xb0/0xb0 [ 486.604796][T11331] ? vfs_write+0x14c/0xe40 [ 486.609266][T11331] ? __fget_files+0x279/0x410 [ 486.614005][T11331] ? ksys_write+0x1a7/0x250 [ 486.618550][T11331] ? __ia32_sys_read+0xb0/0xb0 [ 486.623376][T11331] __x64_sys_sendto+0xe0/0x1b0 02:01:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 486.628184][T11331] ? syscall_enter_from_user_mode+0x26/0x80 [ 486.634143][T11331] do_syscall_64+0x38/0xb0 [ 486.638603][T11331] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 486.644566][T11331] RIP: 0033:0x7fca7227cae9 [ 486.649022][T11331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 486.668680][T11331] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 02:01:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 486.677154][T11331] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 486.685171][T11331] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 486.693181][T11331] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 486.701179][T11331] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 486.707768][T11343] binder: 11342:11343 ioctl c0306201 0 returned -14 [ 486.709160][T11331] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 486.709193][T11331] 02:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc43"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 486.909355][T11355] binder: 11354:11355 ioctl c0306201 0 returned -14 02:01:22 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20482, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x6}, 0x20) r3 = gettid() tkill(r3, 0x1000000000016) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:22 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 8) 02:01:22 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="d842d26dd69aa1decc4300"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 487.080815][T11363] FAULT_INJECTION: forcing a failure. [ 487.080815][T11363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.105842][T11366] mmap: syz-executor.2 (11366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 487.118257][T11363] CPU: 0 PID: 11363 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 487.118298][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 487.118317][T11363] Call Trace: [ 487.118329][T11363] [ 487.144769][T11363] dump_stack_lvl+0x125/0x1b0 [ 487.149488][T11363] should_fail_ex+0x496/0x5b0 [ 487.154720][T11363] copyin+0x1b/0xa0 [ 487.158554][T11363] _copy_from_iter+0x1e5/0x1270 [ 487.163439][T11363] ? _copy_from_iter+0x256/0x1270 [ 487.168491][T11363] ? iov_iter_extract_pages+0x1870/0x1870 [ 487.174241][T11363] ? sock_alloc_send_pskb+0x72b/0x950 [ 487.179647][T11363] ? iov_iter_extract_pages+0x1870/0x1870 [ 487.185408][T11363] copy_page_from_iter+0xa5/0x120 [ 487.190484][T11363] skb_copy_datagram_from_iter+0x41d/0x6b0 [ 487.196329][T11363] packet_sendmsg+0x2066/0x5570 [ 487.201222][T11363] ? preempt_count_sub+0x150/0x150 [ 487.206375][T11363] ? lock_release+0x4bf/0x680 [ 487.211084][T11363] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.217019][T11363] ? aa_sk_perm+0x2c1/0xae0 [ 487.221536][T11363] ? get_pid_task+0xeb/0x250 [ 487.226165][T11363] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 487.232098][T11363] ? aa_af_perm+0x260/0x260 [ 487.236647][T11363] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 487.241980][T11363] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 487.247920][T11363] sock_sendmsg+0xd9/0x180 [ 487.252399][T11363] __sys_sendto+0x255/0x340 [ 487.256924][T11363] ? __ia32_sys_getpeername+0xb0/0xb0 [ 487.262321][T11363] ? vfs_write+0x14c/0xe40 [ 487.266779][T11363] ? __fget_files+0x279/0x410 [ 487.271508][T11363] ? ksys_write+0x1a7/0x250 [ 487.276034][T11363] ? __ia32_sys_read+0xb0/0xb0 [ 487.280822][T11363] __x64_sys_sendto+0xe0/0x1b0 [ 487.285612][T11363] ? syscall_enter_from_user_mode+0x26/0x80 [ 487.291627][T11363] do_syscall_64+0x38/0xb0 [ 487.296070][T11363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 487.302012][T11363] RIP: 0033:0x7fca7227cae9 [ 487.306447][T11363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 487.326092][T11363] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 487.334552][T11363] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 487.342558][T11363] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 487.350544][T11363] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 487.358538][T11363] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 487.366541][T11363] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 487.374554][T11363] 02:01:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 487.394576][T11369] binder: BINDER_SET_CONTEXT_MGR already set [ 487.401346][T11369] binder: 11359:11369 ioctl 4018620d 20000080 returned -16 02:01:23 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="d842d26dd69aa1decc4300"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 02:01:25 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20482, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x6}, 0x20) r3 = gettid() tkill(r3, 0x1000000000016) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20482, 0x0) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2, 0x40000) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x6}, 0x20) (async) gettid() (async) tkill(r3, 0x1000000000016) (async) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:25 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 9) 02:01:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYBLOB="d842d26dd69aa1decc4300"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 490.127076][T11386] binder: BINDER_SET_CONTEXT_MGR already set [ 490.149601][T11389] __nla_validate_parse: 12 callbacks suppressed [ 490.149625][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.157981][T11386] binder: 11384:11386 ioctl 4018620d 20000080 returned -16 [ 490.176154][T11391] FAULT_INJECTION: forcing a failure. [ 490.176154][T11391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.191139][T11392] net_ratelimit: 65 callbacks suppressed [ 490.191167][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.202766][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.208519][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.214251][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.218438][T11391] CPU: 1 PID: 11391 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 490.219983][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.229940][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 490.229962][T11391] Call Trace: [ 490.229973][T11391] [ 490.229984][T11391] dump_stack_lvl+0x125/0x1b0 [ 490.235695][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.245648][T11391] should_fail_ex+0x496/0x5b0 [ 490.249042][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.251887][T11391] copyin+0x1b/0xa0 [ 490.256602][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.262166][T11391] _copy_from_iter+0x1e5/0x1270 [ 490.266909][T11392] protocol 894f is buggy, dev ip6gretap0 [ 490.272485][T11391] ? _copy_from_iter+0x256/0x1270 [ 490.272535][T11391] ? iov_iter_extract_pages+0x1870/0x1870 [ 490.303412][T11391] ? sock_alloc_send_pskb+0x72b/0x950 [ 490.308851][T11391] ? iov_iter_extract_pages+0x1870/0x1870 [ 490.314641][T11391] copy_page_from_iter+0xa5/0x120 [ 490.319731][T11391] skb_copy_datagram_from_iter+0x41d/0x6b0 02:01:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 490.325611][T11391] packet_sendmsg+0x2066/0x5570 [ 490.330538][T11391] ? preempt_count_sub+0x150/0x150 [ 490.335702][T11391] ? lock_release+0x4bf/0x680 [ 490.340431][T11391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 490.346389][T11391] ? aa_sk_perm+0x2c1/0xae0 [ 490.350944][T11391] ? get_pid_task+0xeb/0x250 [ 490.355601][T11391] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 490.361550][T11391] ? aa_af_perm+0x260/0x260 [ 490.366095][T11391] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 490.371441][T11391] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 02:01:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) [ 490.377486][T11391] sock_sendmsg+0xd9/0x180 [ 490.381975][T11391] __sys_sendto+0x255/0x340 [ 490.386535][T11391] ? __ia32_sys_getpeername+0xb0/0xb0 [ 490.391957][T11391] ? vfs_write+0x14c/0xe40 [ 490.396428][T11391] ? __fget_files+0x279/0x410 [ 490.401168][T11391] ? ksys_write+0x1a7/0x250 [ 490.405742][T11391] ? __ia32_sys_read+0xb0/0xb0 [ 490.410563][T11391] __x64_sys_sendto+0xe0/0x1b0 [ 490.415380][T11391] ? syscall_enter_from_user_mode+0x26/0x80 [ 490.421345][T11391] do_syscall_64+0x38/0xb0 [ 490.425804][T11391] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 490.431750][T11391] RIP: 0033:0x7fca7227cae9 [ 490.436208][T11391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 490.447061][T11389] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.455841][T11391] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 02:01:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 490.455875][T11391] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 490.455898][T11391] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 490.489589][T11391] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 490.497604][T11391] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000001 [ 490.505638][T11391] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 490.513680][T11391] 02:01:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 490.556831][T11402] binder: BINDER_SET_CONTEXT_MGR already set [ 490.565528][T11402] binder: 11401:11402 ioctl 4018620d 20000080 returned -16 [ 490.651303][T11404] protocol 894f is buggy, dev ip6gretap0 [ 490.694393][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.725544][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:28 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20482, 0x0) r1 = dup(r0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2, 0x40000) (async) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x2, 0x40000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x1, 0x1, 0x0, 0x2, 0x6}, 0x20) r3 = gettid() tkill(r3, 0x1000000000016) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) move_pages(r3, 0x3, &(0x7f0000000080)=[&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 10) 02:01:28 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 493.234693][T11411] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:29 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:29 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 11) 02:01:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, 0x0, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 493.344079][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.356290][T11424] binder: BINDER_SET_CONTEXT_MGR already set [ 493.365299][T11424] binder: 11423:11424 ioctl 4018620d 20000080 returned -16 [ 493.477252][T11432] FAULT_INJECTION: forcing a failure. [ 493.477252][T11432] name failslab, interval 1, probability 0, space 0, times 0 [ 493.489972][T11432] CPU: 0 PID: 11432 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 493.500092][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 493.510198][T11432] Call Trace: [ 493.513515][T11432] [ 493.516523][T11432] dump_stack_lvl+0x125/0x1b0 [ 493.521268][T11432] should_fail_ex+0x496/0x5b0 [ 493.526013][T11432] should_failslab+0x9/0x20 [ 493.530680][T11432] kmem_cache_alloc_node+0x71/0x3f0 [ 493.535956][T11432] ? __alloc_skb+0x287/0x330 [ 493.540626][T11432] __alloc_skb+0x287/0x330 [ 493.545125][T11432] ? __napi_build_skb+0x50/0x50 [ 493.550051][T11432] ? skb_csum_hwoffload_help+0x110/0x190 [ 493.555824][T11432] ? lock_release+0x4bf/0x680 [ 493.560571][T11432] ? get_random_u32+0x3c5/0x7e0 [ 493.565522][T11432] ? reacquire_held_locks+0x4b0/0x4b0 [ 493.570965][T11432] skb_segment+0x87c/0x3ef0 [ 493.575607][T11432] ? rcu_is_watching+0x12/0xb0 [ 493.580459][T11432] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 493.586505][T11432] ? pskb_extract+0x2b0/0x2b0 [ 493.591207][T11432] ? ip6_find_1stfragopt+0x163/0x2c0 [ 493.596520][T11432] udp6_ufo_fragment+0x9d2/0xd50 [ 493.601546][T11432] ? udp6_gro_complete+0x5a0/0x5a0 [ 493.606674][T11432] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 493.612173][T11432] ipv6_gso_segment+0x5c4/0x17b0 [ 493.617173][T11432] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 493.622667][T11432] ? rcu_is_watching+0x12/0xb0 [ 493.627471][T11432] ? rcu_is_watching+0x12/0xb0 [ 493.632337][T11432] skb_mac_gso_segment+0x292/0x610 [ 493.637520][T11432] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 493.643012][T11432] ? skb_gso_validate_mac_len+0x300/0x300 [ 493.648772][T11432] ? lock_acquire+0x464/0x510 [ 493.653466][T11432] ? skb_network_protocol+0x1f0/0x670 [ 493.658861][T11432] ? lock_sync+0x190/0x190 [ 493.663294][T11432] nsh_gso_segment+0x3c5/0x9e0 [ 493.668137][T11432] skb_mac_gso_segment+0x292/0x610 [ 493.673294][T11432] ? nsh_pop+0x440/0x440 [ 493.677583][T11432] ? skb_gso_validate_mac_len+0x300/0x300 [ 493.683331][T11432] ? rcu_is_watching+0x12/0xb0 [ 493.688107][T11432] ? lock_release+0x4bf/0x680 [ 493.692820][T11432] __skb_gso_segment+0x339/0x710 [ 493.697782][T11432] ? netif_skb_features+0x3b0/0xbd0 [ 493.703003][T11432] validate_xmit_skb+0x3a5/0xf10 [ 493.707976][T11432] validate_xmit_skb_list+0xc1/0x130 [ 493.713284][T11432] sch_direct_xmit+0x3e6/0xc20 [ 493.718107][T11432] ? lock_sync+0x171/0x190 [ 493.722578][T11432] ? lock_sync+0x190/0x190 [ 493.727040][T11432] ? dev_watchdog+0x8f0/0x8f0 [ 493.731733][T11432] ? do_raw_spin_trylock+0xb1/0x180 [ 493.736953][T11432] ? do_raw_spin_lock+0x200/0x2b0 [ 493.742005][T11432] __dev_queue_xmit+0x1282/0x3d80 [ 493.747067][T11432] ? netdev_core_pick_tx+0x390/0x390 [ 493.752376][T11432] ? skb_partial_csum_set+0x202/0x390 [ 493.757791][T11432] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 493.764419][T11432] ? packet_release+0xdc0/0xdc0 [ 493.769314][T11432] packet_xmit+0x257/0x380 [ 493.773749][T11432] packet_sendmsg+0x24c7/0x5570 [ 493.778626][T11432] ? preempt_count_sub+0x150/0x150 [ 493.783764][T11432] ? lock_release+0x4bf/0x680 [ 493.788461][T11432] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 493.794383][T11432] ? aa_sk_perm+0x2c1/0xae0 [ 493.798911][T11432] ? get_pid_task+0xeb/0x250 [ 493.803552][T11432] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 493.809485][T11432] ? aa_af_perm+0x260/0x260 [ 493.814829][T11432] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.820148][T11432] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 493.826061][T11432] sock_sendmsg+0xd9/0x180 [ 493.830531][T11432] __sys_sendto+0x255/0x340 [ 493.835080][T11432] ? __ia32_sys_getpeername+0xb0/0xb0 [ 493.840469][T11432] ? vfs_write+0x14c/0xe40 [ 493.844904][T11432] ? __fget_files+0x279/0x410 [ 493.849597][T11432] ? ksys_write+0x1a7/0x250 [ 493.854110][T11432] ? __ia32_sys_read+0xb0/0xb0 [ 493.858923][T11432] __x64_sys_sendto+0xe0/0x1b0 [ 493.863723][T11432] ? syscall_enter_from_user_mode+0x26/0x80 [ 493.869639][T11432] do_syscall_64+0x38/0xb0 [ 493.874067][T11432] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 493.879985][T11432] RIP: 0033:0x7fca7227cae9 [ 493.884418][T11432] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 493.904048][T11432] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 493.912483][T11432] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 493.920466][T11432] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 493.928443][T11432] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 493.936417][T11432] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 493.944395][T11432] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 493.952388][T11432] 02:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, 0x0, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 12) [ 496.344556][T11442] net_ratelimit: 49 callbacks suppressed [ 496.344581][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.356084][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.361870][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.367623][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.373387][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.379143][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.384870][T11442] protocol 894f is buggy, dev ip6gretap0 02:01:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, 0x0, &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 496.390645][T11442] protocol 894f is buggy, dev ip6gretap0 [ 496.401620][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.432738][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:32 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 13) [ 496.527253][T11450] protocol 894f is buggy, dev ip6gretap0 [ 496.533415][T11450] protocol 894f is buggy, dev ip6gretap0 [ 496.577297][T11453] binder: BINDER_SET_CONTEXT_MGR already set [ 496.585999][T11453] binder: 11452:11453 ioctl 4018620d 20000080 returned -16 [ 496.614207][T11456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.615056][T11454] FAULT_INJECTION: forcing a failure. [ 496.615056][T11454] name failslab, interval 1, probability 0, space 0, times 0 [ 496.636241][T11454] CPU: 1 PID: 11454 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 496.644026][T11456] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.646333][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 496.665715][T11454] Call Trace: [ 496.669039][T11454] [ 496.672011][T11454] dump_stack_lvl+0x125/0x1b0 [ 496.676750][T11454] should_fail_ex+0x496/0x5b0 [ 496.681515][T11454] ? rcu_is_watching+0x12/0xb0 [ 496.686337][T11454] should_failslab+0x9/0x20 [ 496.690910][T11454] kmem_cache_alloc_node+0x71/0x3f0 [ 496.696176][T11454] ? __alloc_skb+0x287/0x330 [ 496.700833][T11454] __alloc_skb+0x287/0x330 [ 496.705316][T11454] ? __napi_build_skb+0x50/0x50 [ 496.710235][T11454] ? skb_copy_bits+0x470/0x7c0 [ 496.715040][T11454] ? reacquire_held_locks+0x4b0/0x4b0 [ 496.720467][T11454] skb_segment+0x87c/0x3ef0 02:01:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000), 0x0) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 496.725018][T11454] ? rcu_is_watching+0x12/0xb0 [ 496.729848][T11454] ? pskb_extract+0x2b0/0x2b0 [ 496.734578][T11454] ? ip6_find_1stfragopt+0x163/0x2c0 [ 496.739932][T11454] udp6_ufo_fragment+0x9d2/0xd50 [ 496.744942][T11454] ? udp6_gro_complete+0x5a0/0x5a0 [ 496.750099][T11454] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 496.755620][T11454] ipv6_gso_segment+0x5c4/0x17b0 [ 496.760612][T11454] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 496.766121][T11454] ? rcu_is_watching+0x12/0xb0 [ 496.770931][T11454] ? rcu_is_watching+0x12/0xb0 [ 496.775738][T11454] skb_mac_gso_segment+0x292/0x610 [ 496.780915][T11454] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 496.786437][T11454] ? skb_gso_validate_mac_len+0x300/0x300 [ 496.792225][T11454] ? lock_acquire+0x464/0x510 [ 496.796954][T11454] ? skb_network_protocol+0x1f0/0x670 [ 496.802386][T11454] ? lock_sync+0x190/0x190 [ 496.806865][T11454] nsh_gso_segment+0x3c5/0x9e0 [ 496.811696][T11454] skb_mac_gso_segment+0x292/0x610 [ 496.816878][T11454] ? nsh_pop+0x440/0x440 [ 496.821192][T11454] ? skb_gso_validate_mac_len+0x300/0x300 [ 496.827062][T11454] ? rcu_is_watching+0x12/0xb0 [ 496.831871][T11454] ? lock_release+0x4bf/0x680 [ 496.836622][T11454] __skb_gso_segment+0x339/0x710 [ 496.841622][T11454] ? netif_skb_features+0x3b0/0xbd0 [ 496.846892][T11454] validate_xmit_skb+0x3a5/0xf10 [ 496.851917][T11454] validate_xmit_skb_list+0xc1/0x130 [ 496.857280][T11454] sch_direct_xmit+0x3e6/0xc20 [ 496.862103][T11454] ? lock_sync+0x171/0x190 [ 496.866581][T11454] ? lock_sync+0x190/0x190 [ 496.871075][T11454] ? dev_watchdog+0x8f0/0x8f0 02:01:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 496.875858][T11454] ? do_raw_spin_trylock+0xb1/0x180 [ 496.881117][T11454] ? do_raw_spin_lock+0x200/0x2b0 [ 496.886229][T11454] __dev_queue_xmit+0x1282/0x3d80 [ 496.891335][T11454] ? netdev_core_pick_tx+0x390/0x390 [ 496.896698][T11454] ? skb_partial_csum_set+0x202/0x390 [ 496.903272][T11454] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 496.909938][T11454] ? packet_release+0xdc0/0xdc0 [ 496.914843][T11454] packet_xmit+0x257/0x380 [ 496.919332][T11454] packet_sendmsg+0x24c7/0x5570 [ 496.924254][T11454] ? preempt_count_sub+0x150/0x150 [ 496.929426][T11454] ? lock_release+0x4bf/0x680 [ 496.934170][T11454] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 496.940126][T11454] ? aa_sk_perm+0x2c1/0xae0 [ 496.944679][T11454] ? get_pid_task+0xeb/0x250 [ 496.949324][T11454] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 496.955364][T11454] ? aa_af_perm+0x260/0x260 [ 496.959926][T11454] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 496.965276][T11454] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 496.971251][T11454] sock_sendmsg+0xd9/0x180 [ 496.975717][T11454] __sys_sendto+0x255/0x340 [ 496.980248][T11454] ? __ia32_sys_getpeername+0xb0/0xb0 [ 496.985647][T11454] ? vfs_write+0x14c/0xe40 [ 496.990102][T11454] ? __fget_files+0x279/0x410 [ 496.994815][T11454] ? ksys_write+0x1a7/0x250 [ 496.999340][T11454] ? __ia32_sys_read+0xb0/0xb0 [ 497.004143][T11454] __x64_sys_sendto+0xe0/0x1b0 [ 497.008945][T11454] ? syscall_enter_from_user_mode+0x26/0x80 [ 497.014880][T11454] do_syscall_64+0x38/0xb0 [ 497.019327][T11454] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 497.025253][T11454] RIP: 0033:0x7fca7227cae9 [ 497.029782][T11454] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 497.049424][T11454] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.057863][T11454] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 497.065868][T11454] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 497.073861][T11454] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 497.081852][T11454] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 497.089843][T11454] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 497.097846][T11454] 02:01:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 14) 02:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 497.153474][T11461] binder: BINDER_SET_CONTEXT_MGR already set [ 497.159691][T11461] binder: 11460:11461 ioctl 4018620d 20000080 returned -16 02:01:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 15) [ 497.303193][T11468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 497.391405][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 497.496722][T11478] FAULT_INJECTION: forcing a failure. [ 497.496722][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 497.509453][T11478] CPU: 1 PID: 11478 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 497.519579][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 497.529689][T11478] Call Trace: [ 497.533003][T11478] [ 497.535967][T11478] dump_stack_lvl+0x125/0x1b0 [ 497.536656][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 497.540696][T11478] should_fail_ex+0x496/0x5b0 [ 497.540762][T11478] ? rcu_is_watching+0x12/0xb0 [ 497.540796][T11478] should_failslab+0x9/0x20 [ 497.540848][T11478] kmem_cache_alloc_node+0x71/0x3f0 [ 497.540897][T11478] ? __alloc_skb+0x287/0x330 [ 497.540953][T11478] __alloc_skb+0x287/0x330 [ 497.541005][T11478] ? __napi_build_skb+0x50/0x50 [ 497.541059][T11478] ? skb_copy_bits+0x470/0x7c0 [ 497.588282][T11478] skb_segment+0x87c/0x3ef0 [ 497.592849][T11478] ? rcu_is_watching+0x12/0xb0 [ 497.597693][T11478] ? pskb_extract+0x2b0/0x2b0 [ 497.602428][T11478] ? ip6_find_1stfragopt+0x163/0x2c0 [ 497.607790][T11478] udp6_ufo_fragment+0x9d2/0xd50 [ 497.612809][T11478] ? udp6_gro_complete+0x5a0/0x5a0 [ 497.617982][T11478] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 497.619307][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 497.623486][T11478] ipv6_gso_segment+0x5c4/0x17b0 [ 497.623538][T11478] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 497.643242][T11478] ? rcu_is_watching+0x12/0xb0 [ 497.648076][T11478] ? rcu_is_watching+0x12/0xb0 [ 497.652890][T11478] skb_mac_gso_segment+0x292/0x610 [ 497.658064][T11478] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 497.663581][T11478] ? skb_gso_validate_mac_len+0x300/0x300 [ 497.669383][T11478] ? lock_acquire+0x464/0x510 [ 497.674120][T11478] ? skb_network_protocol+0x1f0/0x670 [ 497.679559][T11478] ? lock_sync+0x190/0x190 [ 497.684042][T11478] nsh_gso_segment+0x3c5/0x9e0 [ 497.688884][T11478] skb_mac_gso_segment+0x292/0x610 02:01:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 497.694073][T11478] ? nsh_pop+0x440/0x440 [ 497.698379][T11478] ? skb_gso_validate_mac_len+0x300/0x300 [ 497.704180][T11478] ? rcu_is_watching+0x12/0xb0 [ 497.708999][T11478] ? lock_release+0x4bf/0x680 [ 497.713746][T11478] __skb_gso_segment+0x339/0x710 [ 497.718756][T11478] ? netif_skb_features+0x3b0/0xbd0 [ 497.724033][T11478] validate_xmit_skb+0x3a5/0xf10 [ 497.729052][T11478] validate_xmit_skb_list+0xc1/0x130 [ 497.734512][T11478] sch_direct_xmit+0x3e6/0xc20 [ 497.739347][T11478] ? lock_sync+0x171/0x190 [ 497.743829][T11478] ? lock_sync+0x190/0x190 [ 497.748310][T11478] ? dev_watchdog+0x8f0/0x8f0 [ 497.753090][T11478] ? do_raw_spin_trylock+0xb1/0x180 [ 497.758341][T11478] ? do_raw_spin_lock+0x200/0x2b0 [ 497.763445][T11478] __dev_queue_xmit+0x1282/0x3d80 [ 497.768559][T11478] ? netdev_core_pick_tx+0x390/0x390 [ 497.773913][T11478] ? skb_partial_csum_set+0x202/0x390 [ 497.779366][T11478] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 497.786027][T11478] ? packet_release+0xdc0/0xdc0 [ 497.790936][T11478] packet_xmit+0x257/0x380 [ 497.795435][T11478] packet_sendmsg+0x24c7/0x5570 [ 497.800373][T11478] ? preempt_count_sub+0x150/0x150 [ 497.805551][T11478] ? lock_release+0x4bf/0x680 [ 497.810284][T11478] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.816250][T11478] ? aa_sk_perm+0x2c1/0xae0 [ 497.820808][T11478] ? get_pid_task+0xeb/0x250 [ 497.825471][T11478] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 497.831438][T11478] ? aa_af_perm+0x260/0x260 [ 497.835997][T11478] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 497.841373][T11478] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 497.847335][T11478] sock_sendmsg+0xd9/0x180 [ 497.851831][T11478] __sys_sendto+0x255/0x340 [ 497.856385][T11478] ? __ia32_sys_getpeername+0xb0/0xb0 [ 497.861810][T11478] ? vfs_write+0x14c/0xe40 [ 497.866286][T11478] ? __fget_files+0x279/0x410 [ 497.871013][T11478] ? ksys_write+0x1a7/0x250 [ 497.875570][T11478] ? __ia32_sys_read+0xb0/0xb0 [ 497.880413][T11478] __x64_sys_sendto+0xe0/0x1b0 [ 497.885248][T11478] ? syscall_enter_from_user_mode+0x26/0x80 [ 497.891206][T11478] do_syscall_64+0x38/0xb0 [ 497.895684][T11478] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 497.901720][T11478] RIP: 0033:0x7fca7227cae9 [ 497.906182][T11478] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 497.925843][T11478] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 497.934307][T11478] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 497.942340][T11478] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 497.950351][T11478] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 497.958363][T11478] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 497.966378][T11478] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 497.974404][T11478] 02:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 498.148101][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 498.228990][T11485] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 16) 02:01:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:34 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 17) [ 498.609573][T11507] FAULT_INJECTION: forcing a failure. [ 498.609573][T11507] name failslab, interval 1, probability 0, space 0, times 0 [ 498.622377][T11507] CPU: 0 PID: 11507 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 498.632516][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 498.642710][T11507] Call Trace: [ 498.646037][T11507] [ 498.649211][T11507] dump_stack_lvl+0x125/0x1b0 [ 498.653958][T11507] should_fail_ex+0x496/0x5b0 [ 498.658708][T11507] ? rcu_is_watching+0x12/0xb0 [ 498.663543][T11507] should_failslab+0x9/0x20 [ 498.668123][T11507] kmem_cache_alloc_node+0x71/0x3f0 [ 498.673393][T11507] ? __alloc_skb+0x287/0x330 [ 498.678058][T11507] __alloc_skb+0x287/0x330 [ 498.682547][T11507] ? __napi_build_skb+0x50/0x50 [ 498.687472][T11507] ? skb_copy_bits+0x470/0x7c0 [ 498.692304][T11507] skb_segment+0x87c/0x3ef0 [ 498.696870][T11507] ? rcu_is_watching+0x12/0xb0 [ 498.701699][T11507] ? pskb_extract+0x2b0/0x2b0 [ 498.706426][T11507] ? ip6_find_1stfragopt+0x163/0x2c0 [ 498.711777][T11507] udp6_ufo_fragment+0x9d2/0xd50 [ 498.717293][T11507] ? udp6_gro_complete+0x5a0/0x5a0 [ 498.722466][T11507] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 498.727998][T11507] ipv6_gso_segment+0x5c4/0x17b0 [ 498.733002][T11507] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 498.738518][T11507] ? rcu_is_watching+0x12/0xb0 [ 498.743350][T11507] ? rcu_is_watching+0x12/0xb0 [ 498.748167][T11507] skb_mac_gso_segment+0x292/0x610 [ 498.753349][T11507] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 498.758866][T11507] ? skb_gso_validate_mac_len+0x300/0x300 [ 498.764658][T11507] ? lock_acquire+0x464/0x510 [ 498.769500][T11507] ? skb_network_protocol+0x1f0/0x670 [ 498.775014][T11507] ? lock_sync+0x190/0x190 [ 498.779495][T11507] nsh_gso_segment+0x3c5/0x9e0 [ 498.784326][T11507] skb_mac_gso_segment+0x292/0x610 [ 498.789505][T11507] ? nsh_pop+0x440/0x440 [ 498.793876][T11507] ? skb_gso_validate_mac_len+0x300/0x300 [ 498.799651][T11507] ? rcu_is_watching+0x12/0xb0 [ 498.804479][T11507] ? lock_release+0x4bf/0x680 [ 498.809216][T11507] __skb_gso_segment+0x339/0x710 [ 498.814214][T11507] ? netif_skb_features+0x3b0/0xbd0 [ 498.819477][T11507] validate_xmit_skb+0x3a5/0xf10 [ 498.824519][T11507] validate_xmit_skb_list+0xc1/0x130 [ 498.829871][T11507] sch_direct_xmit+0x3e6/0xc20 [ 498.834691][T11507] ? lock_sync+0x171/0x190 [ 498.839164][T11507] ? lock_sync+0x190/0x190 [ 498.843644][T11507] ? dev_watchdog+0x8f0/0x8f0 [ 498.848371][T11507] ? do_raw_spin_trylock+0xb1/0x180 [ 498.853635][T11507] ? do_raw_spin_lock+0x200/0x2b0 [ 498.858728][T11507] __dev_queue_xmit+0x1282/0x3d80 [ 498.863827][T11507] ? netdev_core_pick_tx+0x390/0x390 [ 498.869369][T11507] ? skb_partial_csum_set+0x202/0x390 [ 498.874825][T11507] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 498.881511][T11507] ? packet_release+0xdc0/0xdc0 [ 498.886426][T11507] packet_xmit+0x257/0x380 [ 498.890928][T11507] packet_sendmsg+0x24c7/0x5570 [ 498.895873][T11507] ? preempt_count_sub+0x150/0x150 [ 498.901058][T11507] ? lock_release+0x4bf/0x680 [ 498.905830][T11507] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 498.911876][T11507] ? aa_sk_perm+0x2c1/0xae0 [ 498.916449][T11507] ? get_pid_task+0xeb/0x250 [ 498.921105][T11507] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 498.927061][T11507] ? aa_af_perm+0x260/0x260 [ 498.931635][T11507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 498.936983][T11507] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 498.942934][T11507] sock_sendmsg+0xd9/0x180 [ 498.947416][T11507] __sys_sendto+0x255/0x340 [ 498.951986][T11507] ? __ia32_sys_getpeername+0xb0/0xb0 [ 498.957420][T11507] ? vfs_write+0x14c/0xe40 [ 498.961904][T11507] ? __fget_files+0x279/0x410 [ 498.966644][T11507] ? ksys_write+0x1a7/0x250 [ 498.971198][T11507] ? __ia32_sys_read+0xb0/0xb0 [ 498.976015][T11507] __x64_sys_sendto+0xe0/0x1b0 [ 498.980832][T11507] ? syscall_enter_from_user_mode+0x26/0x80 [ 498.986803][T11507] do_syscall_64+0x38/0xb0 [ 498.991363][T11507] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 498.997314][T11507] RIP: 0033:0x7fca7227cae9 02:01:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a687700"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 499.001764][T11507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 499.021424][T11507] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.030005][T11507] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 499.038023][T11507] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 499.046041][T11507] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff 02:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a687700"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:34 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x11c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6ad}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "1c9d175bded05d94aac7b73f48295ab35315fe857e6d900258e341e05acdcc0f761fae3a8d4d2690da02f0a7f67ae676521f95d45864c1f95b94f0112543274fbc6f1a0a7ef58632a213d8597faefa5329c331f5bd675e543b88e275a3adde772d388a33cc9ae097d0f69499016580e1331f9eef201e985a39f0c843b6b3ff1d0314ea1b8759666f5306e497397cf62addf4a845466c00af07a5fd21840a47458db130a593f6e726f66d174c54d9b9de183d0235895cc4b1becdcb295be8abf069632d5a7722f6cb16f778ff962c2f6655d42dee0e9129e98994dd13911b7f75e2f7d1f9802a968b50f6c1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="6312b42084b882e641cf043b27a24017a40120f7b2f106c45d22645f4d14b57fd9d8447430ec88f82ea6511603d17efbd6d2f478689e11e9519f7b09ee0b0c570af6457f57983d2b", 0x0, 0x48) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r5 = dup(r4) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="9139bfed2067fe68bae8a24620cce89ac73873475110e5be2e54647db16601ec460a011d13d40d4e275208e2ec658511a6fab0f6c633699efb2f563d33fee9a3e1d2473554b82996", 0x0, 0x48) [ 499.054050][T11507] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 499.062064][T11507] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 499.070105][T11507] [ 499.087105][T11509] binder: BINDER_SET_CONTEXT_MGR already set [ 499.093355][T11509] binder: 11508:11509 ioctl 4018620d 20000080 returned -16 02:01:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 18) 02:01:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x11c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6ad}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "1c9d175bded05d94aac7b73f48295ab35315fe857e6d900258e341e05acdcc0f761fae3a8d4d2690da02f0a7f67ae676521f95d45864c1f95b94f0112543274fbc6f1a0a7ef58632a213d8597faefa5329c331f5bd675e543b88e275a3adde772d388a33cc9ae097d0f69499016580e1331f9eef201e985a39f0c843b6b3ff1d0314ea1b8759666f5306e497397cf62addf4a845466c00af07a5fd21840a47458db130a593f6e726f66d174c54d9b9de183d0235895cc4b1becdcb295be8abf069632d5a7722f6cb16f778ff962c2f6655d42dee0e9129e98994dd13911b7f75e2f7d1f9802a968b50f6c1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="6312b42084b882e641cf043b27a24017a40120f7b2f106c45d22645f4d14b57fd9d8447430ec88f82ea6511603d17efbd6d2f478689e11e9519f7b09ee0b0c570af6457f57983d2b", 0x0, 0x48) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r5 = dup(r4) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="9139bfed2067fe68bae8a24620cce89ac73873475110e5be2e54647db16601ec460a011d13d40d4e275208e2ec658511a6fab0f6c633699efb2f563d33fee9a3e1d2473554b82996", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x11c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6ad}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "1c9d175bded05d94aac7b73f48295ab35315fe857e6d900258e341e05acdcc0f761fae3a8d4d2690da02f0a7f67ae676521f95d45864c1f95b94f0112543274fbc6f1a0a7ef58632a213d8597faefa5329c331f5bd675e543b88e275a3adde772d388a33cc9ae097d0f69499016580e1331f9eef201e985a39f0c843b6b3ff1d0314ea1b8759666f5306e497397cf62addf4a845466c00af07a5fd21840a47458db130a593f6e726f66d174c54d9b9de183d0235895cc4b1becdcb295be8abf069632d5a7722f6cb16f778ff962c2f6655d42dee0e9129e98994dd13911b7f75e2f7d1f9802a968b50f6c1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="6312b42084b882e641cf043b27a24017a40120f7b2f106c45d22645f4d14b57fd9d8447430ec88f82ea6511603d17efbd6d2f478689e11e9519f7b09ee0b0c570af6457f57983d2b", 0x0, 0x48) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) dup(r4) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r5, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="9139bfed2067fe68bae8a24620cce89ac73873475110e5be2e54647db16601ec460a011d13d40d4e275208e2ec658511a6fab0f6c633699efb2f563d33fee9a3e1d2473554b82996", 0x0, 0x48) (async) [ 499.239146][T11514] binder: BINDER_SET_CONTEXT_MGR already set [ 499.261339][T11514] binder: 11512:11514 ioctl 4018620d 20000080 returned -16 02:01:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 19) 02:01:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a687700"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:35 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x11c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6ad}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "1c9d175bded05d94aac7b73f48295ab35315fe857e6d900258e341e05acdcc0f761fae3a8d4d2690da02f0a7f67ae676521f95d45864c1f95b94f0112543274fbc6f1a0a7ef58632a213d8597faefa5329c331f5bd675e543b88e275a3adde772d388a33cc9ae097d0f69499016580e1331f9eef201e985a39f0c843b6b3ff1d0314ea1b8759666f5306e497397cf62addf4a845466c00af07a5fd21840a47458db130a593f6e726f66d174c54d9b9de183d0235895cc4b1becdcb295be8abf069632d5a7722f6cb16f778ff962c2f6655d42dee0e9129e98994dd13911b7f75e2f7d1f9802a968b50f6c1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) (async) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x11c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x6ad}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_DATA={0xef, 0xc5, "1c9d175bded05d94aac7b73f48295ab35315fe857e6d900258e341e05acdcc0f761fae3a8d4d2690da02f0a7f67ae676521f95d45864c1f95b94f0112543274fbc6f1a0a7ef58632a213d8597faefa5329c331f5bd675e543b88e275a3adde772d388a33cc9ae097d0f69499016580e1331f9eef201e985a39f0c843b6b3ff1d0314ea1b8759666f5306e497397cf62addf4a845466c00af07a5fd21840a47458db130a593f6e726f66d174c54d9b9de183d0235895cc4b1becdcb295be8abf069632d5a7722f6cb16f778ff962c2f6655d42dee0e9129e98994dd13911b7f75e2f7d1f9802a968b50f6c1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="6312b42084b882e641cf043b27a24017a40120f7b2f106c45d22645f4d14b57fd9d8447430ec88f82ea6511603d17efbd6d2f478689e11e9519f7b09ee0b0c570af6457f57983d2b", 0x0, 0x48) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r4) (async) r5 = dup(r4) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r5, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000080)="9139bfed2067fe68bae8a24620cce89ac73873475110e5be2e54647db16601ec460a011d13d40d4e275208e2ec658511a6fab0f6c633699efb2f563d33fee9a3e1d2473554b82996", 0x0, 0x48) 02:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 499.416922][T11528] binder: BINDER_SET_CONTEXT_MGR already set [ 499.454813][T11528] binder: 11527:11528 ioctl 4018620d 20000080 returned -16 02:01:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001d00)) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000280)={0x10, 0x360, 0x3c0, 0x138, 0x1, 0x4, 0x18, 0x0, {0x1, 0x95, 0x1}, {0x7fffffff, 0x3}, {0x6, 0x80000000, 0x1}, {0x1, 0x72d3}, 0x3, 0x0, 0x6d8, 0x2, 0x1, 0x0, 0x8, 0x2, 0x3f, 0x8, 0xfffffff8, 0x2, 0x0, 0x200}) r3 = dup(r0) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x58400) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x780, 0x1000, 0xa00, 0x960, 0x86, 0x3, 0x1, 0x1, {0x8001, 0x400}, {0x5, 0x3ff}, {0xe3, 0x7fff, 0x1}, {0x1, 0x1}, 0x1, 0x2, 0x0, 0x2124, 0x1, 0x7ff, 0x6, 0x3, 0x1, 0x3, 0xff, 0xffff, 0x0, 0x0, 0x1, 0xa}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x4, r5, 0x0, &(0x7f0000000080)="aeb6f856b3a6d0dd5702b0ed5cf55ce1dd417f8248db8f3a3597da0e08e07e5358d89d483a7f3340c9af7ace5cab5f7b45c96026a6f639513e7431f5a9d9f4deb2c39d286a41d6c9ed7f86bf2efb7d94", 0x50, 0x7f}) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a6877001100"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:35 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 20) 02:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:35 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001d00)) (async) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000280)={0x10, 0x360, 0x3c0, 0x138, 0x1, 0x4, 0x18, 0x0, {0x1, 0x95, 0x1}, {0x7fffffff, 0x3}, {0x6, 0x80000000, 0x1}, {0x1, 0x72d3}, 0x3, 0x0, 0x6d8, 0x2, 0x1, 0x0, 0x8, 0x2, 0x3f, 0x8, 0xfffffff8, 0x2, 0x0, 0x200}) r3 = dup(r0) (async) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x58400) (async) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x780, 0x1000, 0xa00, 0x960, 0x86, 0x3, 0x1, 0x1, {0x8001, 0x400}, {0x5, 0x3ff}, {0xe3, 0x7fff, 0x1}, {0x1, 0x1}, 0x1, 0x2, 0x0, 0x2124, 0x1, 0x7ff, 0x6, 0x3, 0x1, 0x3, 0xff, 0xffff, 0x0, 0x0, 0x1, 0xa}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x4, r5, 0x0, &(0x7f0000000080)="aeb6f856b3a6d0dd5702b0ed5cf55ce1dd417f8248db8f3a3597da0e08e07e5358d89d483a7f3340c9af7ace5cab5f7b45c96026a6f639513e7431f5a9d9f4deb2c39d286a41d6c9ed7f86bf2efb7d94", 0x50, 0x7f}) (async) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 499.599673][T11542] binder: BINDER_SET_CONTEXT_MGR already set [ 499.623029][T11542] binder: 11540:11542 ioctl 4018620d 20000080 returned -16 [ 499.677652][T11546] FAULT_INJECTION: forcing a failure. [ 499.677652][T11546] name failslab, interval 1, probability 0, space 0, times 0 [ 499.690391][T11546] CPU: 0 PID: 11546 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 499.700517][T11546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 499.710638][T11546] Call Trace: [ 499.713961][T11546] [ 499.716945][T11546] dump_stack_lvl+0x125/0x1b0 [ 499.721691][T11546] should_fail_ex+0x496/0x5b0 [ 499.726524][T11546] ? rcu_is_watching+0x12/0xb0 [ 499.731442][T11546] should_failslab+0x9/0x20 [ 499.736033][T11546] kmem_cache_alloc_node+0x71/0x3f0 [ 499.741308][T11546] ? __alloc_skb+0x287/0x330 [ 499.745987][T11546] __alloc_skb+0x287/0x330 [ 499.750501][T11546] ? __napi_build_skb+0x50/0x50 [ 499.750554][T11546] ? skb_copy_bits+0x470/0x7c0 [ 499.750587][T11546] skb_segment+0x87c/0x3ef0 [ 499.750619][T11546] ? rcu_is_watching+0x12/0xb0 [ 499.750661][T11546] ? pskb_extract+0x2b0/0x2b0 [ 499.750693][T11546] ? ip6_find_1stfragopt+0x163/0x2c0 [ 499.750728][T11546] udp6_ufo_fragment+0x9d2/0xd50 [ 499.750766][T11546] ? udp6_gro_complete+0x5a0/0x5a0 [ 499.750799][T11546] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 499.750837][T11546] ipv6_gso_segment+0x5c4/0x17b0 [ 499.750874][T11546] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 499.750907][T11546] ? rcu_is_watching+0x12/0xb0 [ 499.750938][T11546] ? rcu_is_watching+0x12/0xb0 [ 499.750967][T11546] skb_mac_gso_segment+0x292/0x610 [ 499.751009][T11546] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 499.751041][T11546] ? skb_gso_validate_mac_len+0x300/0x300 [ 499.751082][T11546] ? lock_acquire+0x464/0x510 [ 499.751118][T11546] ? skb_network_protocol+0x1f0/0x670 [ 499.751159][T11546] ? lock_sync+0x190/0x190 [ 499.751197][T11546] nsh_gso_segment+0x3c5/0x9e0 [ 499.751239][T11546] skb_mac_gso_segment+0x292/0x610 [ 499.751286][T11546] ? nsh_pop+0x440/0x440 [ 499.751320][T11546] ? skb_gso_validate_mac_len+0x300/0x300 [ 499.751362][T11546] ? rcu_is_watching+0x12/0xb0 [ 499.751387][T11546] ? lock_release+0x4bf/0x680 [ 499.751426][T11546] __skb_gso_segment+0x339/0x710 [ 499.751466][T11546] ? netif_skb_features+0x3b0/0xbd0 [ 499.751510][T11546] validate_xmit_skb+0x3a5/0xf10 [ 499.751555][T11546] validate_xmit_skb_list+0xc1/0x130 [ 499.751600][T11546] sch_direct_xmit+0x3e6/0xc20 [ 499.751627][T11546] ? lock_sync+0x171/0x190 [ 499.751662][T11546] ? lock_sync+0x190/0x190 [ 499.751698][T11546] ? dev_watchdog+0x8f0/0x8f0 [ 499.751722][T11546] ? do_raw_spin_trylock+0xb1/0x180 [ 499.751762][T11546] ? do_raw_spin_lock+0x200/0x2b0 [ 499.751807][T11546] __dev_queue_xmit+0x1282/0x3d80 [ 499.751857][T11546] ? netdev_core_pick_tx+0x390/0x390 [ 499.751903][T11546] ? skb_partial_csum_set+0x202/0x390 [ 499.751954][T11546] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 499.751998][T11546] ? packet_release+0xdc0/0xdc0 [ 499.752037][T11546] packet_xmit+0x257/0x380 [ 499.752074][T11546] packet_sendmsg+0x24c7/0x5570 [ 499.752122][T11546] ? preempt_count_sub+0x150/0x150 [ 499.752162][T11546] ? lock_release+0x4bf/0x680 [ 499.752197][T11546] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 499.752245][T11546] ? aa_sk_perm+0x2c1/0xae0 [ 499.752273][T11546] ? get_pid_task+0xeb/0x250 [ 499.752311][T11546] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 499.752347][T11546] ? aa_af_perm+0x260/0x260 [ 499.752377][T11546] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 499.752418][T11546] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 499.752459][T11546] sock_sendmsg+0xd9/0x180 [ 499.752501][T11546] __sys_sendto+0x255/0x340 [ 499.752528][T11546] ? __ia32_sys_getpeername+0xb0/0xb0 [ 499.752557][T11546] ? vfs_write+0x14c/0xe40 [ 499.752590][T11546] ? __fget_files+0x279/0x410 [ 499.752624][T11546] ? ksys_write+0x1a7/0x250 [ 499.752650][T11546] ? __ia32_sys_read+0xb0/0xb0 [ 499.752680][T11546] __x64_sys_sendto+0xe0/0x1b0 [ 499.752706][T11546] ? syscall_enter_from_user_mode+0x26/0x80 [ 499.752745][T11546] do_syscall_64+0x38/0xb0 [ 499.752773][T11546] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 499.752806][T11546] RIP: 0033:0x7fca7227cae9 [ 499.752827][T11546] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 499.752854][T11546] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 499.752881][T11546] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 499.752900][T11546] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 02:01:36 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a6877001100"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 21) 02:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 499.752924][T11546] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 499.752942][T11546] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 499.752959][T11546] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 499.752987][T11546] [ 500.236187][T11555] FAULT_INJECTION: forcing a failure. [ 500.236187][T11555] name failslab, interval 1, probability 0, space 0, times 0 [ 500.248906][T11555] CPU: 0 PID: 11555 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 500.259019][T11555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 500.269111][T11555] Call Trace: [ 500.272413][T11555] [ 500.275364][T11555] dump_stack_lvl+0x125/0x1b0 [ 500.280076][T11555] should_fail_ex+0x496/0x5b0 [ 500.284788][T11555] ? rcu_is_watching+0x12/0xb0 [ 500.289579][T11555] should_failslab+0x9/0x20 [ 500.294122][T11555] kmem_cache_alloc_node+0x71/0x3f0 [ 500.299363][T11555] ? __alloc_skb+0x287/0x330 [ 500.304025][T11555] __alloc_skb+0x287/0x330 [ 500.308520][T11555] ? __napi_build_skb+0x50/0x50 [ 500.313433][T11555] ? skb_copy_bits+0x470/0x7c0 [ 500.318240][T11555] skb_segment+0x87c/0x3ef0 [ 500.322770][T11555] ? rcu_is_watching+0x12/0xb0 [ 500.327591][T11555] ? pskb_extract+0x2b0/0x2b0 [ 500.332314][T11555] ? ip6_find_1stfragopt+0x163/0x2c0 [ 500.337731][T11555] udp6_ufo_fragment+0x9d2/0xd50 [ 500.342740][T11555] ? udp6_gro_complete+0x5a0/0x5a0 [ 500.347891][T11555] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 500.353489][T11555] ipv6_gso_segment+0x5c4/0x17b0 [ 500.358467][T11555] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 500.363963][T11555] ? rcu_is_watching+0x12/0xb0 [ 500.368755][T11555] ? rcu_is_watching+0x12/0xb0 [ 500.373547][T11555] skb_mac_gso_segment+0x292/0x610 [ 500.378731][T11555] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 500.384244][T11555] ? skb_gso_validate_mac_len+0x300/0x300 [ 500.390009][T11555] ? lock_acquire+0x464/0x510 [ 500.394721][T11555] ? skb_network_protocol+0x1f0/0x670 [ 500.400223][T11555] ? lock_sync+0x190/0x190 [ 500.404895][T11555] nsh_gso_segment+0x3c5/0x9e0 [ 500.409702][T11555] skb_mac_gso_segment+0x292/0x610 [ 500.414850][T11555] ? nsh_pop+0x440/0x440 [ 500.419115][T11555] ? skb_gso_validate_mac_len+0x300/0x300 [ 500.424907][T11555] ? rcu_is_watching+0x12/0xb0 [ 500.429704][T11555] ? lock_release+0x4bf/0x680 [ 500.434469][T11555] __skb_gso_segment+0x339/0x710 [ 500.439538][T11555] ? netif_skb_features+0x3b0/0xbd0 [ 500.444780][T11555] validate_xmit_skb+0x3a5/0xf10 [ 500.449856][T11555] validate_xmit_skb_list+0xc1/0x130 [ 500.455198][T11555] sch_direct_xmit+0x3e6/0xc20 [ 500.460006][T11555] ? lock_sync+0x171/0x190 [ 500.464457][T11555] ? lock_sync+0x190/0x190 [ 500.468955][T11555] ? dev_watchdog+0x8f0/0x8f0 [ 500.473666][T11555] ? do_raw_spin_trylock+0xb1/0x180 [ 500.478959][T11555] ? do_raw_spin_lock+0x200/0x2b0 [ 500.484124][T11555] __dev_queue_xmit+0x1282/0x3d80 [ 500.489208][T11555] ? netdev_core_pick_tx+0x390/0x390 [ 500.494584][T11555] ? skb_partial_csum_set+0x202/0x390 [ 500.500025][T11555] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 500.506666][T11555] ? packet_release+0xdc0/0xdc0 [ 500.511559][T11555] packet_xmit+0x257/0x380 [ 500.516016][T11555] packet_sendmsg+0x24c7/0x5570 [ 500.520917][T11555] ? preempt_count_sub+0x150/0x150 [ 500.526078][T11555] ? lock_release+0x4bf/0x680 [ 500.530796][T11555] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 500.536747][T11555] ? aa_sk_perm+0x2c1/0xae0 [ 500.541711][T11555] ? get_pid_task+0xeb/0x250 [ 500.546445][T11555] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 500.552463][T11555] ? aa_af_perm+0x260/0x260 [ 500.557009][T11555] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 500.562341][T11555] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 500.568284][T11555] sock_sendmsg+0xd9/0x180 [ 500.572757][T11555] __sys_sendto+0x255/0x340 [ 500.577290][T11555] ? __ia32_sys_getpeername+0xb0/0xb0 [ 500.582743][T11555] ? vfs_write+0x14c/0xe40 [ 500.587210][T11555] ? __fget_files+0x279/0x410 [ 500.591926][T11555] ? ksys_write+0x1a7/0x250 [ 500.596459][T11555] ? __ia32_sys_read+0xb0/0xb0 [ 500.601260][T11555] __x64_sys_sendto+0xe0/0x1b0 [ 500.606123][T11555] ? syscall_enter_from_user_mode+0x26/0x80 [ 500.612068][T11555] do_syscall_64+0x38/0xb0 [ 500.616521][T11555] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 500.622452][T11555] RIP: 0033:0x7fca7227cae9 [ 500.626927][T11555] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 500.646567][T11555] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 500.655005][T11555] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 500.663005][T11555] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 500.671007][T11555] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 500.679005][T11555] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 500.687018][T11555] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 500.695034][T11555] 02:01:36 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = dup2(r1, r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001d00)) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000280)={0x10, 0x360, 0x3c0, 0x138, 0x1, 0x4, 0x18, 0x0, {0x1, 0x95, 0x1}, {0x7fffffff, 0x3}, {0x6, 0x80000000, 0x1}, {0x1, 0x72d3}, 0x3, 0x0, 0x6d8, 0x2, 0x1, 0x0, 0x8, 0x2, 0x3f, 0x8, 0xfffffff8, 0x2, 0x0, 0x200}) r3 = dup(r0) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x58400) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc080, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x780, 0x1000, 0xa00, 0x960, 0x86, 0x3, 0x1, 0x1, {0x8001, 0x400}, {0x5, 0x3ff}, {0xe3, 0x7fff, 0x1}, {0x1, 0x1}, 0x1, 0x2, 0x0, 0x2124, 0x1, 0x7ff, 0x6, 0x3, 0x1, 0x3, 0xff, 0xffff, 0x0, 0x0, 0x1, 0xa}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x4, r5, 0x0, &(0x7f0000000080)="aeb6f856b3a6d0dd5702b0ed5cf55ce1dd417f8248db8f3a3597da0e08e07e5358d89d483a7f3340c9af7ace5cab5f7b45c96026a6f639513e7431f5a9d9f4deb2c39d286a41d6c9ed7f86bf2efb7d94", 0x50, 0x7f}) r6 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) dup2(r1, r1) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001d00)) (async) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000280)={0x10, 0x360, 0x3c0, 0x138, 0x1, 0x4, 0x18, 0x0, {0x1, 0x95, 0x1}, {0x7fffffff, 0x3}, {0x6, 0x80000000, 0x1}, {0x1, 0x72d3}, 0x3, 0x0, 0x6d8, 0x2, 0x1, 0x0, 0x8, 0x2, 0x3f, 0x8, 0xfffffff8, 0x2, 0x0, 0x200}) (async) dup(r0) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x58400) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xc080, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x780, 0x1000, 0xa00, 0x960, 0x86, 0x3, 0x1, 0x1, {0x8001, 0x400}, {0x5, 0x3ff}, {0xe3, 0x7fff, 0x1}, {0x1, 0x1}, 0x1, 0x2, 0x0, 0x2124, 0x1, 0x7ff, 0x6, 0x3, 0x1, 0x3, 0xff, 0xffff, 0x0, 0x0, 0x1, 0xa}) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r4, 0x3ba0, &(0x7f0000000100)={0x38, 0x4, r5, 0x0, &(0x7f0000000080)="aeb6f856b3a6d0dd5702b0ed5cf55ce1dd417f8248db8f3a3597da0e08e07e5358d89d483a7f3340c9af7ace5cab5f7b45c96026a6f639513e7431f5a9d9f4deb2c39d286a41d6c9ed7f86bf2efb7d94", 0x50, 0x7f}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a6877001100"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 22) 02:01:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a687700110000"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:36 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) ioctl$FBIOBLANK(r3, 0x4611, 0x4) 02:01:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 23) [ 500.991500][T11579] FAULT_INJECTION: forcing a failure. [ 500.991500][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 501.004224][T11579] CPU: 1 PID: 11579 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 501.014393][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 501.024499][T11579] Call Trace: [ 501.027924][T11579] [ 501.030912][T11579] dump_stack_lvl+0x125/0x1b0 [ 501.035678][T11579] should_fail_ex+0x496/0x5b0 [ 501.040424][T11579] ? rcu_is_watching+0x12/0xb0 [ 501.045248][T11579] should_failslab+0x9/0x20 [ 501.049833][T11579] kmem_cache_alloc_node+0x71/0x3f0 [ 501.055217][T11579] ? __alloc_skb+0x287/0x330 [ 501.059887][T11579] __alloc_skb+0x287/0x330 [ 501.064387][T11579] ? __napi_build_skb+0x50/0x50 [ 501.069392][T11579] ? skb_copy_bits+0x470/0x7c0 [ 501.074234][T11579] skb_segment+0x87c/0x3ef0 [ 501.078805][T11579] ? rcu_is_watching+0x12/0xb0 [ 501.078854][T11579] ? pskb_extract+0x2b0/0x2b0 [ 501.078891][T11579] ? ip6_find_1stfragopt+0x163/0x2c0 [ 501.078929][T11579] udp6_ufo_fragment+0x9d2/0xd50 [ 501.078977][T11579] ? udp6_gro_complete+0x5a0/0x5a0 [ 501.079029][T11579] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 501.079073][T11579] ipv6_gso_segment+0x5c4/0x17b0 [ 501.079118][T11579] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 501.079153][T11579] ? rcu_is_watching+0x12/0xb0 [ 501.079183][T11579] ? rcu_is_watching+0x12/0xb0 [ 501.079215][T11579] skb_mac_gso_segment+0x292/0x610 [ 501.079263][T11579] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 501.079299][T11579] ? skb_gso_validate_mac_len+0x300/0x300 [ 501.079345][T11579] ? lock_acquire+0x464/0x510 [ 501.079385][T11579] ? skb_network_protocol+0x1f0/0x670 [ 501.079433][T11579] ? lock_sync+0x190/0x190 [ 501.079479][T11579] nsh_gso_segment+0x3c5/0x9e0 [ 501.079544][T11579] skb_mac_gso_segment+0x292/0x610 [ 501.079593][T11579] ? nsh_pop+0x440/0x440 [ 501.079633][T11579] ? skb_gso_validate_mac_len+0x300/0x300 [ 501.079685][T11579] ? rcu_is_watching+0x12/0xb0 [ 501.079719][T11579] ? lock_release+0x4bf/0x680 [ 501.079769][T11579] __skb_gso_segment+0x339/0x710 [ 501.079819][T11579] ? netif_skb_features+0x3b0/0xbd0 [ 501.079870][T11579] validate_xmit_skb+0x3a5/0xf10 [ 501.079925][T11579] validate_xmit_skb_list+0xc1/0x130 [ 501.079988][T11579] sch_direct_xmit+0x3e6/0xc20 [ 501.080022][T11579] ? lock_sync+0x171/0x190 [ 501.080064][T11579] ? lock_sync+0x190/0x190 [ 501.080107][T11579] ? dev_watchdog+0x8f0/0x8f0 [ 501.080136][T11579] ? do_raw_spin_trylock+0xb1/0x180 [ 501.080183][T11579] ? do_raw_spin_lock+0x200/0x2b0 [ 501.080238][T11579] __dev_queue_xmit+0x1282/0x3d80 [ 501.080300][T11579] ? netdev_core_pick_tx+0x390/0x390 [ 501.080351][T11579] ? skb_partial_csum_set+0x202/0x390 [ 501.080406][T11579] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 501.080459][T11579] ? packet_release+0xdc0/0xdc0 [ 501.080505][T11579] packet_xmit+0x257/0x380 [ 501.080550][T11579] packet_sendmsg+0x24c7/0x5570 [ 501.080608][T11579] ? preempt_count_sub+0x150/0x150 [ 501.080660][T11579] ? lock_release+0x4bf/0x680 [ 501.080701][T11579] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 501.080760][T11579] ? aa_sk_perm+0x2c1/0xae0 [ 501.080793][T11579] ? get_pid_task+0xeb/0x250 [ 501.080842][T11579] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 501.080892][T11579] ? aa_af_perm+0x260/0x260 [ 501.080930][T11579] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 501.080990][T11579] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 501.081040][T11579] sock_sendmsg+0xd9/0x180 [ 501.081090][T11579] __sys_sendto+0x255/0x340 [ 501.081123][T11579] ? __ia32_sys_getpeername+0xb0/0xb0 [ 501.081159][T11579] ? vfs_write+0x14c/0xe40 [ 501.081202][T11579] ? __fget_files+0x279/0x410 [ 501.081245][T11579] ? ksys_write+0x1a7/0x250 [ 501.081278][T11579] ? __ia32_sys_read+0xb0/0xb0 [ 501.081317][T11579] __x64_sys_sendto+0xe0/0x1b0 [ 501.081350][T11579] ? syscall_enter_from_user_mode+0x26/0x80 [ 501.081400][T11579] do_syscall_64+0x38/0xb0 [ 501.081435][T11579] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 501.081473][T11579] RIP: 0033:0x7fca7227cae9 [ 501.081498][T11579] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 501.081530][T11579] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 501.081562][T11579] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 501.081584][T11579] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 501.081604][T11579] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 501.081625][T11579] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 501.081645][T11579] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 501.081679][T11579] 02:01:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 24) 02:01:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) ioctl$FBIOBLANK(r3, 0x4611, 0x4) 02:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000180000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 501.601963][T11589] __nla_validate_parse: 14 callbacks suppressed [ 501.601988][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:37 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a687700110000"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:37 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 25) 02:01:37 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) ioctl$FBIOBLANK(r3, 0x4611, 0x4) [ 501.668749][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 501.767783][T11597] FAULT_INJECTION: forcing a failure. [ 501.767783][T11597] name failslab, interval 1, probability 0, space 0, times 0 [ 501.780485][T11597] CPU: 1 PID: 11597 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 501.790604][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 501.800706][T11597] Call Trace: [ 501.804025][T11597] [ 501.807001][T11597] dump_stack_lvl+0x125/0x1b0 [ 501.811747][T11597] should_fail_ex+0x496/0x5b0 [ 501.816492][T11597] ? rcu_is_watching+0x12/0xb0 [ 501.821325][T11597] should_failslab+0x9/0x20 [ 501.825909][T11597] kmem_cache_alloc_node+0x71/0x3f0 [ 501.831183][T11597] ? __alloc_skb+0x287/0x330 [ 501.835898][T11597] __alloc_skb+0x287/0x330 [ 501.840068][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 501.840383][T11597] ? __napi_build_skb+0x50/0x50 [ 501.854562][T11597] ? skb_copy_bits+0x470/0x7c0 [ 501.859361][T11597] skb_segment+0x87c/0x3ef0 [ 501.863903][T11597] ? rcu_is_watching+0x12/0xb0 [ 501.868715][T11597] ? pskb_extract+0x2b0/0x2b0 [ 501.873428][T11597] ? ip6_find_1stfragopt+0x163/0x2c0 [ 501.878749][T11597] udp6_ufo_fragment+0x9d2/0xd50 [ 501.883729][T11597] ? udp6_gro_complete+0x5a0/0x5a0 [ 501.888874][T11597] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 501.894374][T11597] ipv6_gso_segment+0x5c4/0x17b0 [ 501.899354][T11597] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 501.904846][T11597] ? rcu_is_watching+0x12/0xb0 [ 501.909642][T11597] ? rcu_is_watching+0x12/0xb0 [ 501.914434][T11597] skb_mac_gso_segment+0x292/0x610 [ 501.919589][T11597] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 501.925079][T11597] ? skb_gso_validate_mac_len+0x300/0x300 [ 501.930855][T11597] ? lock_acquire+0x464/0x510 [ 501.935573][T11597] ? skb_network_protocol+0x1f0/0x670 [ 501.940992][T11597] ? lock_sync+0x190/0x190 [ 501.945448][T11597] nsh_gso_segment+0x3c5/0x9e0 [ 501.950258][T11597] skb_mac_gso_segment+0x292/0x610 [ 501.955413][T11597] ? nsh_pop+0x440/0x440 [ 501.959686][T11597] ? skb_gso_validate_mac_len+0x300/0x300 [ 501.965536][T11597] ? rcu_is_watching+0x12/0xb0 [ 501.970414][T11597] ? lock_release+0x4bf/0x680 [ 501.975140][T11597] __skb_gso_segment+0x339/0x710 [ 501.980115][T11597] ? netif_skb_features+0x3b0/0xbd0 [ 501.985357][T11597] validate_xmit_skb+0x3a5/0xf10 [ 501.990340][T11597] validate_xmit_skb_list+0xc1/0x130 [ 501.995673][T11597] sch_direct_xmit+0x3e6/0xc20 [ 502.000465][T11597] ? lock_sync+0x171/0x190 [ 502.005003][T11597] ? lock_sync+0x190/0x190 [ 502.009455][T11597] ? dev_watchdog+0x8f0/0x8f0 [ 502.014161][T11597] ? do_raw_spin_trylock+0xb1/0x180 [ 502.019397][T11597] ? do_raw_spin_lock+0x200/0x2b0 [ 502.024476][T11597] __dev_queue_xmit+0x1282/0x3d80 [ 502.029551][T11597] ? netdev_core_pick_tx+0x390/0x390 [ 502.034898][T11597] ? skb_partial_csum_set+0x202/0x390 [ 502.040309][T11597] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 502.046941][T11597] ? packet_release+0xdc0/0xdc0 [ 502.051824][T11597] packet_xmit+0x257/0x380 [ 502.056277][T11597] packet_sendmsg+0x24c7/0x5570 [ 502.061171][T11597] ? preempt_count_sub+0x150/0x150 [ 502.066320][T11597] ? lock_release+0x4bf/0x680 [ 502.071023][T11597] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.076960][T11597] ? aa_sk_perm+0x2c1/0xae0 [ 502.081576][T11597] ? get_pid_task+0xeb/0x250 [ 502.086202][T11597] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 502.092134][T11597] ? aa_af_perm+0x260/0x260 [ 502.096669][T11597] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 502.101989][T11597] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 502.107919][T11597] sock_sendmsg+0xd9/0x180 [ 502.112374][T11597] __sys_sendto+0x255/0x340 [ 502.116908][T11597] ? __ia32_sys_getpeername+0xb0/0xb0 [ 502.122312][T11597] ? vfs_write+0x14c/0xe40 [ 502.126777][T11597] ? __fget_files+0x279/0x410 [ 502.131487][T11597] ? ksys_write+0x1a7/0x250 [ 502.136018][T11597] ? __ia32_sys_read+0xb0/0xb0 [ 502.140809][T11597] __x64_sys_sendto+0xe0/0x1b0 [ 502.145598][T11597] ? syscall_enter_from_user_mode+0x26/0x80 [ 502.151621][T11597] do_syscall_64+0x38/0xb0 [ 502.156069][T11597] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 502.161993][T11597] RIP: 0033:0x7fca7227cae9 [ 502.166434][T11597] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 502.190321][T11597] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.198763][T11597] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 502.206759][T11597] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 502.214778][T11597] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 502.222777][T11597] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 502.230857][T11597] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 502.238857][T11597] 02:01:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) r1 = dup(r0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x3a, 0x1}) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x800000, 0x8010, r1, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000040)="106304dddfe2f645eda9e61b77ac136dc39f0f8fa745f7fe", 0x0, 0x18) 02:01:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a687700110000"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 502.283818][T11602] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) r1 = dup(r0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x3a, 0x1}) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x800000, 0x8010, r1, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000040)="106304dddfe2f645eda9e61b77ac136dc39f0f8fa745f7fe", 0x0, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) (async) dup(r0) (async) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x3a, 0x1}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x800000, 0x8010, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000040)="106304dddfe2f645eda9e61b77ac136dc39f0f8fa745f7fe", 0x0, 0x18) (async) 02:01:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 26) 02:01:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], 0x0}}], 0x0, 0x0, 0x0}) [ 502.413520][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 502.487074][T11616] FAULT_INJECTION: forcing a failure. [ 502.487074][T11616] name failslab, interval 1, probability 0, space 0, times 0 [ 502.499837][T11616] CPU: 0 PID: 11616 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 502.499878][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 502.499898][T11616] Call Trace: [ 502.499909][T11616] [ 502.499921][T11616] dump_stack_lvl+0x125/0x1b0 [ 502.499967][T11616] should_fail_ex+0x496/0x5b0 [ 502.500013][T11616] ? rcu_is_watching+0x12/0xb0 [ 502.540615][T11616] should_failslab+0x9/0x20 [ 502.540681][T11616] kmem_cache_alloc_node+0x71/0x3f0 [ 502.540731][T11616] ? __alloc_skb+0x287/0x330 [ 502.555118][T11616] __alloc_skb+0x287/0x330 [ 502.559636][T11616] ? __napi_build_skb+0x50/0x50 [ 502.564586][T11616] ? skb_copy_bits+0x470/0x7c0 [ 502.565416][T11617] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 502.569383][T11616] skb_segment+0x87c/0x3ef0 [ 502.569424][T11616] ? rcu_is_watching+0x12/0xb0 [ 502.569473][T11616] ? pskb_extract+0x2b0/0x2b0 [ 502.592766][T11616] ? ip6_find_1stfragopt+0x163/0x2c0 [ 502.598137][T11616] udp6_ufo_fragment+0x9d2/0xd50 [ 502.603146][T11616] ? udp6_gro_complete+0x5a0/0x5a0 [ 502.608324][T11616] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 502.613852][T11616] ipv6_gso_segment+0x5c4/0x17b0 [ 502.618864][T11616] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 502.624383][T11616] ? rcu_is_watching+0x12/0xb0 [ 502.629204][T11616] ? rcu_is_watching+0x12/0xb0 [ 502.634026][T11616] skb_mac_gso_segment+0x292/0x610 [ 502.639204][T11616] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 502.644730][T11616] ? skb_gso_validate_mac_len+0x300/0x300 [ 502.650501][T11616] ? lock_acquire+0x464/0x510 [ 502.655218][T11616] ? skb_network_protocol+0x1f0/0x670 [ 502.660638][T11616] ? lock_sync+0x190/0x190 [ 502.665097][T11616] nsh_gso_segment+0x3c5/0x9e0 [ 502.669938][T11616] skb_mac_gso_segment+0x292/0x610 [ 502.675104][T11616] ? nsh_pop+0x440/0x440 [ 502.679394][T11616] ? skb_gso_validate_mac_len+0x300/0x300 [ 502.685158][T11616] ? rcu_is_watching+0x12/0xb0 [ 502.690071][T11616] ? lock_release+0x4bf/0x680 [ 502.694787][T11616] __skb_gso_segment+0x339/0x710 [ 502.699767][T11616] ? netif_skb_features+0x3b0/0xbd0 [ 502.705009][T11616] validate_xmit_skb+0x3a5/0xf10 [ 502.710000][T11616] validate_xmit_skb_list+0xc1/0x130 [ 502.715331][T11616] sch_direct_xmit+0x3e6/0xc20 [ 502.720209][T11616] ? lock_sync+0x171/0x190 [ 502.724660][T11616] ? lock_sync+0x190/0x190 [ 502.729114][T11616] ? dev_watchdog+0x8f0/0x8f0 [ 502.733815][T11616] ? do_raw_spin_trylock+0xb1/0x180 [ 502.739050][T11616] ? do_raw_spin_lock+0x200/0x2b0 [ 502.744639][T11616] __dev_queue_xmit+0x1282/0x3d80 [ 502.749822][T11616] ? netdev_core_pick_tx+0x390/0x390 [ 502.755148][T11616] ? skb_partial_csum_set+0x202/0x390 [ 502.760569][T11616] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 502.767199][T11616] ? packet_release+0xdc0/0xdc0 [ 502.772091][T11616] packet_xmit+0x257/0x380 [ 502.776545][T11616] packet_sendmsg+0x24c7/0x5570 [ 502.781453][T11616] ? preempt_count_sub+0x150/0x150 [ 502.786640][T11616] ? lock_release+0x4bf/0x680 [ 502.791385][T11616] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 502.797351][T11616] ? aa_sk_perm+0x2c1/0xae0 [ 502.801878][T11616] ? get_pid_task+0xeb/0x250 [ 502.806520][T11616] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 502.812516][T11616] ? aa_af_perm+0x260/0x260 [ 502.817050][T11616] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 502.822375][T11616] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 502.828309][T11616] sock_sendmsg+0xd9/0x180 [ 502.832762][T11616] __sys_sendto+0x255/0x340 [ 502.837382][T11616] ? __ia32_sys_getpeername+0xb0/0xb0 [ 502.842779][T11616] ? vfs_write+0x14c/0xe40 [ 502.847831][T11616] ? __fget_files+0x279/0x410 [ 502.852536][T11616] ? ksys_write+0x1a7/0x250 [ 502.857061][T11616] ? __ia32_sys_read+0xb0/0xb0 [ 502.861853][T11616] __x64_sys_sendto+0xe0/0x1b0 [ 502.866650][T11616] ? syscall_enter_from_user_mode+0x26/0x80 [ 502.872642][T11616] do_syscall_64+0x38/0xb0 [ 502.877180][T11616] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 502.883105][T11616] RIP: 0033:0x7fca7227cae9 [ 502.887540][T11616] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 502.907176][T11616] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.915616][T11616] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 502.923633][T11616] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 502.931626][T11616] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 502.939621][T11616] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 502.947613][T11616] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 502.955623][T11616] 02:01:38 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x4000002, 0x0, 0x0) 02:01:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], 0x0}}], 0x0, 0x0, 0x0}) 02:01:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) r1 = dup(r0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x3a, 0x1}) (async) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ff9000/0x4000)=nil, 0x930, 0x800000, 0x8010, r1, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r3, 0x20, &(0x7f0000000040)="106304dddfe2f645eda9e61b77ac136dc39f0f8fa745f7fe", 0x0, 0x18) 02:01:38 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 27) 02:01:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0xf, 0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x1b, 0x2}) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x11, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) 02:01:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], 0x0}}], 0x0, 0x0, 0x0}) 02:01:39 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0xf, 0x1}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x1b, 0x2}) (async) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x11, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) [ 503.143903][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 503.182461][T11637] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 28) 02:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a6877001100"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 503.350188][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 503.388496][T11649] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:39 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x400002, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0xf, 0x1}) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000080)={0x1b, 0x2}) (async) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x11, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async, rerun: 32) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000000c0)) (rerun: 32) 02:01:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 29) 02:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:39 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:39 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:39 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="7622aa6280c55d34693ee4b54203e1afdf2758c3080815c95894f95d54258e6d9a92d9abddaffbc9ef523e92fb3496814b236ef5bb526bd2dd3977149744b5708856a4c63c0715d46cf6ee070c0e701ddbb8930218cd52f8acd879ca370b0641169ffe336f697ac023b0fdf14c53b0d2a370986d26acd943105be45f242c82a1c3fd9fd090a64236d17ba981f33720650e21d91bf6183f6cbe102bd7ae9c55bffc0839bb30d412f02e6175566647d4d716f97d04102eecb24cda87e212d05c3d5ec6060ebcb02cedad2f0c8312e9dffb781af12fc736fa290b87ab093061cff254b98e695d4fcb46f813c73e50fe4cef8f52f0f3cc3c5be93179fc29f28163f4") r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x24002, 0x0) r2 = dup(r1) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 504.018885][T11663] FAULT_INJECTION: forcing a failure. [ 504.018885][T11663] name failslab, interval 1, probability 0, space 0, times 0 [ 504.031695][T11663] CPU: 1 PID: 11663 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 504.041823][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 504.051936][T11663] Call Trace: [ 504.055259][T11663] [ 504.058260][T11663] dump_stack_lvl+0x125/0x1b0 [ 504.063003][T11663] should_fail_ex+0x496/0x5b0 [ 504.067739][T11663] ? lock_sync+0x190/0x190 [ 504.072215][T11663] should_failslab+0x9/0x20 [ 504.076771][T11663] kmem_cache_alloc+0x69/0x3b0 [ 504.081585][T11663] ? kfree_skbmem+0xef/0x1b0 [ 504.086223][T11663] skb_clone+0x171/0x3c0 [ 504.090500][T11663] dev_queue_xmit_nit+0x38b/0xb80 [ 504.095572][T11663] dev_hard_start_xmit+0x59/0x6c0 [ 504.100650][T11663] sch_direct_xmit+0x1ac/0xc20 [ 504.105441][T11663] ? lock_sync+0x190/0x190 [ 504.109893][T11663] ? dev_watchdog+0x8f0/0x8f0 [ 504.114612][T11663] ? do_raw_spin_trylock+0xb1/0x180 [ 504.119964][T11663] ? do_raw_spin_lock+0x200/0x2b0 [ 504.125045][T11663] __dev_queue_xmit+0x1282/0x3d80 [ 504.130127][T11663] ? netdev_core_pick_tx+0x390/0x390 [ 504.135628][T11663] ? skb_partial_csum_set+0x202/0x390 [ 504.141049][T11663] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 504.147688][T11663] ? packet_release+0xdc0/0xdc0 [ 504.152646][T11663] packet_xmit+0x257/0x380 [ 504.157105][T11663] packet_sendmsg+0x24c7/0x5570 [ 504.162019][T11663] ? preempt_count_sub+0x150/0x150 [ 504.167170][T11663] ? lock_release+0x4bf/0x680 [ 504.171917][T11663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 504.177863][T11663] ? aa_sk_perm+0x2c1/0xae0 [ 504.182399][T11663] ? get_pid_task+0xeb/0x250 [ 504.187044][T11663] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 504.192994][T11663] ? aa_af_perm+0x260/0x260 [ 504.197527][T11663] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 504.202875][T11663] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 504.208812][T11663] sock_sendmsg+0xd9/0x180 [ 504.213273][T11663] __sys_sendto+0x255/0x340 [ 504.217808][T11663] ? __ia32_sys_getpeername+0xb0/0xb0 [ 504.223207][T11663] ? vfs_write+0x14c/0xe40 [ 504.227654][T11663] ? __fget_files+0x279/0x410 [ 504.232358][T11663] ? ksys_write+0x1a7/0x250 [ 504.236976][T11663] ? __ia32_sys_read+0xb0/0xb0 [ 504.241793][T11663] __x64_sys_sendto+0xe0/0x1b0 [ 504.246675][T11663] ? syscall_enter_from_user_mode+0x26/0x80 [ 504.252685][T11663] do_syscall_64+0x38/0xb0 [ 504.257305][T11663] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 504.263226][T11663] RIP: 0033:0x7fca7227cae9 [ 504.267663][T11663] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 504.287313][T11663] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 504.295764][T11663] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 504.303947][T11663] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 504.311972][T11663] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 504.319973][T11663] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 504.327975][T11663] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 504.335994][T11663] [ 504.339289][T11663] net_ratelimit: 38 callbacks suppressed [ 504.339309][T11663] protocol 894f is buggy, dev ip6gretap0 [ 504.350887][T11663] protocol 894f is buggy, dev ip6gretap0 [ 504.356620][T11663] protocol 894f is buggy, dev ip6gretap0 [ 504.362379][T11663] protocol 894f is buggy, dev ip6gretap0 02:01:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x0}) 02:01:40 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) (async, rerun: 64) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="7622aa6280c55d34693ee4b54203e1afdf2758c3080815c95894f95d54258e6d9a92d9abddaffbc9ef523e92fb3496814b236ef5bb526bd2dd3977149744b5708856a4c63c0715d46cf6ee070c0e701ddbb8930218cd52f8acd879ca370b0641169ffe336f697ac023b0fdf14c53b0d2a370986d26acd943105be45f242c82a1c3fd9fd090a64236d17ba981f33720650e21d91bf6183f6cbe102bd7ae9c55bffc0839bb30d412f02e6175566647d4d716f97d04102eecb24cda87e212d05c3d5ec6060ebcb02cedad2f0c8312e9dffb781af12fc736fa290b87ab093061cff254b98e695d4fcb46f813c73e50fe4cef8f52f0f3cc3c5be93179fc29f28163f4") (async, rerun: 64) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x24002, 0x0) r2 = dup(r1) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 504.368127][T11663] protocol 894f is buggy, dev ip6gretap0 [ 504.373975][T11663] protocol 894f is buggy, dev ip6gretap0 [ 504.379719][T11663] protocol 894f is buggy, dev ip6gretap0 [ 504.385432][T11663] protocol 894f is buggy, dev ip6gretap0 02:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:40 executing program 2: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x24002, 0x0) r2 = dup(r1) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 30) 02:01:40 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x800, 0x20, 0x1, 0x5b}, &(0x7f0000000200)=0x18) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000100)={0x52b, 0x5, &(0x7f0000000000)=[0x6, 0x32d7, 0x2, 0x5, 0x6], &(0x7f0000000040)=[0x5, 0xa, 0x2003, 0xffff, 0xdd1c, 0x266, 0xe1b], &(0x7f0000000080)=[0x5], &(0x7f00000000c0)}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 504.704680][T11682] FAULT_INJECTION: forcing a failure. [ 504.704680][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 504.717647][T11682] CPU: 1 PID: 11682 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 504.727765][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 504.734859][T11680] binder: 11678:11680 unknown command 287493 [ 504.737878][T11682] Call Trace: [ 504.737890][T11682] [ 504.737900][T11682] dump_stack_lvl+0x125/0x1b0 [ 504.754847][T11682] should_fail_ex+0x496/0x5b0 [ 504.759569][T11682] ? rcu_is_watching+0x12/0xb0 [ 504.764358][T11682] should_failslab+0x9/0x20 [ 504.768896][T11682] kmem_cache_alloc_node+0x71/0x3f0 [ 504.774196][T11682] ? __alloc_skb+0x287/0x330 [ 504.778842][T11682] __alloc_skb+0x287/0x330 [ 504.783313][T11682] ? __napi_build_skb+0x50/0x50 [ 504.788222][T11682] ? skb_copy_bits+0x470/0x7c0 [ 504.793017][T11682] skb_segment+0x87c/0x3ef0 [ 504.797723][T11682] ? rcu_is_watching+0x12/0xb0 [ 504.802552][T11682] ? pskb_extract+0x2b0/0x2b0 [ 504.807270][T11682] ? ip6_find_1stfragopt+0x163/0x2c0 [ 504.812600][T11682] udp6_ufo_fragment+0x9d2/0xd50 [ 504.817563][T11682] ? udp6_gro_complete+0x5a0/0x5a0 [ 504.822715][T11682] ? ipv6_gso_pull_exthdrs+0x224/0x510 [ 504.828416][T11682] ipv6_gso_segment+0x5c4/0x17b0 [ 504.833387][T11682] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 504.838878][T11682] ? rcu_is_watching+0x12/0xb0 [ 504.843765][T11682] ? rcu_is_watching+0x12/0xb0 [ 504.848561][T11682] skb_mac_gso_segment+0x292/0x610 [ 504.853838][T11682] ? ipv6_gso_pull_exthdrs+0x510/0x510 [ 504.859416][T11682] ? skb_gso_validate_mac_len+0x300/0x300 [ 504.865184][T11682] ? lock_acquire+0x464/0x510 [ 504.870071][T11682] ? skb_network_protocol+0x1f0/0x670 [ 504.875500][T11682] ? lock_sync+0x190/0x190 [ 504.879968][T11682] nsh_gso_segment+0x3c5/0x9e0 [ 504.884775][T11682] skb_mac_gso_segment+0x292/0x610 [ 504.889933][T11682] ? nsh_pop+0x440/0x440 [ 504.894224][T11682] ? skb_gso_validate_mac_len+0x300/0x300 [ 504.899995][T11682] ? rcu_is_watching+0x12/0xb0 [ 504.904784][T11682] ? lock_release+0x4bf/0x680 [ 504.909584][T11682] __skb_gso_segment+0x339/0x710 [ 504.914599][T11682] ? netif_skb_features+0x3b0/0xbd0 [ 504.919898][T11682] validate_xmit_skb+0x3a5/0xf10 [ 504.924879][T11682] validate_xmit_skb_list+0xc1/0x130 [ 504.930210][T11682] sch_direct_xmit+0x3e6/0xc20 [ 504.935093][T11682] ? lock_sync+0x171/0x190 [ 504.939719][T11682] ? lock_sync+0x190/0x190 [ 504.944171][T11682] ? dev_watchdog+0x8f0/0x8f0 [ 504.948873][T11682] ? do_raw_spin_trylock+0xb1/0x180 [ 504.954144][T11682] ? do_raw_spin_lock+0x200/0x2b0 [ 504.959206][T11682] __dev_queue_xmit+0x1282/0x3d80 [ 504.964289][T11682] ? netdev_core_pick_tx+0x390/0x390 [ 504.969633][T11682] ? skb_partial_csum_set+0x202/0x390 [ 504.975132][T11682] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 504.981762][T11682] ? packet_release+0xdc0/0xdc0 [ 504.986646][T11682] packet_xmit+0x257/0x380 [ 504.991106][T11682] packet_sendmsg+0x24c7/0x5570 [ 504.995999][T11682] ? preempt_count_sub+0x150/0x150 [ 505.001148][T11682] ? lock_release+0x4bf/0x680 [ 505.005971][T11682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.011927][T11682] ? aa_sk_perm+0x2c1/0xae0 [ 505.016465][T11682] ? get_pid_task+0xeb/0x250 [ 505.021098][T11682] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 505.027116][T11682] ? aa_af_perm+0x260/0x260 [ 505.031651][T11682] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 505.037061][T11682] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 505.043003][T11682] sock_sendmsg+0xd9/0x180 [ 505.047467][T11682] __sys_sendto+0x255/0x340 [ 505.051997][T11682] ? __ia32_sys_getpeername+0xb0/0xb0 [ 505.057403][T11682] ? vfs_write+0x14c/0xe40 [ 505.061854][T11682] ? __fget_files+0x279/0x410 [ 505.066564][T11682] ? ksys_write+0x1a7/0x250 [ 505.071123][T11682] ? __ia32_sys_read+0xb0/0xb0 [ 505.076002][T11682] __x64_sys_sendto+0xe0/0x1b0 [ 505.080884][T11682] ? syscall_enter_from_user_mode+0x26/0x80 [ 505.086817][T11682] do_syscall_64+0x38/0xb0 [ 505.091266][T11682] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 505.097202][T11682] RIP: 0033:0x7fca7227cae9 [ 505.101640][T11682] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 505.121826][T11682] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 505.130286][T11682] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 505.138378][T11682] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 505.146719][T11682] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 505.154715][T11682] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 505.163151][T11682] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 505.171187][T11682] 02:01:41 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:41 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x800, 0x20, 0x1, 0x5b}, &(0x7f0000000200)=0x18) (async) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000100)={0x52b, 0x5, &(0x7f0000000000)=[0x6, 0x32d7, 0x2, 0x5, 0x6], &(0x7f0000000040)=[0x5, 0xa, 0x2003, 0xffff, 0xdd1c, 0x266, 0xe1b], &(0x7f0000000080)=[0x5], &(0x7f00000000c0)}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:41 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 1) [ 505.198973][T11680] binder: 11678:11680 ioctl c0306201 20001480 returned -22 02:01:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 31) 02:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:41 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000001c0)={0x0, 0x800, 0x20, 0x1, 0x5b}, &(0x7f0000000200)=0x18) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r2 = dup(r1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000100)={0x52b, 0x5, &(0x7f0000000000)=[0x6, 0x32d7, 0x2, 0x5, 0x6], &(0x7f0000000040)=[0x5, 0xa, 0x2003, 0xffff, 0xdd1c, 0x266, 0xe1b], &(0x7f0000000080)=[0x5], &(0x7f00000000c0)}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 505.348008][T11691] FAULT_INJECTION: forcing a failure. [ 505.348008][T11691] name failslab, interval 1, probability 0, space 0, times 0 [ 505.391996][T11701] FAULT_INJECTION: forcing a failure. [ 505.391996][T11701] name failslab, interval 1, probability 0, space 0, times 0 [ 505.404701][T11701] CPU: 0 PID: 11701 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 505.414820][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 505.424916][T11701] Call Trace: [ 505.428233][T11701] [ 505.431198][T11701] dump_stack_lvl+0x125/0x1b0 [ 505.435930][T11701] should_fail_ex+0x496/0x5b0 [ 505.440661][T11701] ? lock_sync+0x190/0x190 [ 505.445562][T11701] should_failslab+0x9/0x20 [ 505.450131][T11701] kmem_cache_alloc+0x69/0x3b0 [ 505.454942][T11701] ? kfree_skbmem+0xef/0x1b0 [ 505.459585][T11701] skb_clone+0x171/0x3c0 [ 505.463882][T11701] dev_queue_xmit_nit+0x38b/0xb80 [ 505.468996][T11701] dev_hard_start_xmit+0x59/0x6c0 [ 505.474264][T11701] sch_direct_xmit+0x1ac/0xc20 [ 505.479066][T11701] ? lock_sync+0x190/0x190 [ 505.483651][T11701] ? dev_watchdog+0x8f0/0x8f0 [ 505.488392][T11701] ? do_raw_spin_trylock+0xb1/0x180 [ 505.493664][T11701] ? do_raw_spin_lock+0x200/0x2b0 [ 505.498748][T11701] __dev_queue_xmit+0x1282/0x3d80 [ 505.503827][T11701] ? netdev_core_pick_tx+0x390/0x390 [ 505.509172][T11701] ? skb_partial_csum_set+0x202/0x390 [ 505.514684][T11701] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 505.521327][T11701] ? packet_release+0xdc0/0xdc0 [ 505.526232][T11701] packet_xmit+0x257/0x380 [ 505.530699][T11701] packet_sendmsg+0x24c7/0x5570 [ 505.535603][T11701] ? preempt_count_sub+0x150/0x150 [ 505.540763][T11701] ? lock_release+0x4bf/0x680 [ 505.545481][T11701] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 505.551433][T11701] ? aa_sk_perm+0x2c1/0xae0 [ 505.555968][T11701] ? get_pid_task+0xeb/0x250 [ 505.560666][T11701] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 505.566600][T11701] ? aa_af_perm+0x260/0x260 [ 505.571135][T11701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 505.576512][T11701] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 505.582458][T11701] sock_sendmsg+0xd9/0x180 [ 505.586936][T11701] __sys_sendto+0x255/0x340 [ 505.591473][T11701] ? __ia32_sys_getpeername+0xb0/0xb0 [ 505.596966][T11701] ? vfs_write+0x14c/0xe40 [ 505.601507][T11701] ? __fget_files+0x279/0x410 [ 505.606240][T11701] ? ksys_write+0x1a7/0x250 [ 505.610864][T11701] ? __ia32_sys_read+0xb0/0xb0 [ 505.615660][T11701] __x64_sys_sendto+0xe0/0x1b0 [ 505.620461][T11701] ? syscall_enter_from_user_mode+0x26/0x80 [ 505.626481][T11701] do_syscall_64+0x38/0xb0 [ 505.630929][T11701] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 505.637034][T11701] RIP: 0033:0x7fca7227cae9 [ 505.641475][T11701] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 505.661202][T11701] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 505.669641][T11701] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 505.677639][T11701] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 505.686070][T11701] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 505.694060][T11701] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 505.702057][T11701] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 505.710063][T11701] [ 505.713315][T11701] protocol 894f is buggy, dev ip6gretap0 [ 505.718233][T11691] CPU: 1 PID: 11691 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 505.719078][T11701] protocol 894f is buggy, dev ip6gretap0 [ 505.729135][T11691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 505.729156][T11691] Call Trace: [ 505.729167][T11691] [ 505.729177][T11691] dump_stack_lvl+0x125/0x1b0 [ 505.755957][T11691] should_fail_ex+0x496/0x5b0 [ 505.760688][T11691] should_failslab+0x9/0x20 [ 505.765242][T11691] __kmem_cache_alloc_node+0x2fd/0x350 [ 505.770743][T11691] ? tomoyo_realpath_from_path+0xb9/0x710 [ 505.776509][T11691] ? tomoyo_realpath_from_path+0xb9/0x710 [ 505.782259][T11691] __kmalloc+0x4f/0x100 [ 505.786464][T11691] tomoyo_realpath_from_path+0xb9/0x710 [ 505.792047][T11691] ? lock_release+0x4bf/0x680 [ 505.796761][T11691] ? tomoyo_profile+0x47/0x60 [ 505.801482][T11691] tomoyo_path_number_perm+0x243/0x590 [ 505.806978][T11691] ? tomoyo_path_number_perm+0x1eb/0x590 [ 505.812747][T11691] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 505.818621][T11691] ? lock_release+0x4bf/0x680 [ 505.823355][T11691] ? reacquire_held_locks+0x4b0/0x4b0 [ 505.828776][T11691] ? bit_wait_timeout+0x160/0x160 [ 505.833902][T11691] ? __fget_files+0x279/0x410 [ 505.838612][T11691] ? __fget_files+0x279/0x410 [ 505.843319][T11691] security_file_ioctl+0x72/0xb0 [ 505.848322][T11691] __x64_sys_ioctl+0xbb/0x210 [ 505.853146][T11691] do_syscall_64+0x38/0xb0 [ 505.857599][T11691] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 505.863549][T11691] RIP: 0033:0x7f147ae7cae9 [ 505.867989][T11691] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 505.887624][T11691] RSP: 002b:00007f147bc480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.896054][T11691] RAX: ffffffffffffffda RBX: 00007f147af9bf80 RCX: 00007f147ae7cae9 [ 505.904041][T11691] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000004 [ 505.912034][T11691] RBP: 00007f147bc48120 R08: 0000000000000000 R09: 0000000000000000 [ 505.920027][T11691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.928023][T11691] R13: 000000000000000b R14: 00007f147af9bf80 R15: 00007f147b0bfa48 [ 505.936025][T11691] 02:01:41 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0x258, 0xa00, 0x10, 0xd6e3, 0x9, 0x4, 0x2, {0x4, 0x20}, {0x5, 0x9}, {0xfffffac4}, {0xc4b5, 0x7, 0x1}, 0x2, 0x10, 0xffffffe1, 0x800, 0x0, 0x9, 0x7f, 0x1f, 0x7fffffff, 0x3f, 0x0, 0x4, 0x4, 0x1, 0x1, 0x1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x680600, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000006, 0x13, r2, 0x0) r4 = epoll_create(0xe823) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)=0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r6}, 0x18) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="add974eba3eb5c133c858000dfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec801fcdab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) socket(0x11, 0x4, 0x1) 02:01:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 32) 02:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 506.008881][T11708] FAULT_INJECTION: forcing a failure. [ 506.008881][T11708] name failslab, interval 1, probability 0, space 0, times 0 [ 506.021845][T11708] CPU: 0 PID: 11708 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 506.029185][T11691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.031941][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 506.031963][T11708] Call Trace: [ 506.031975][T11708] [ 506.031986][T11708] dump_stack_lvl+0x125/0x1b0 [ 506.059748][T11708] should_fail_ex+0x496/0x5b0 [ 506.064481][T11708] ? lock_sync+0x190/0x190 [ 506.068938][T11708] should_failslab+0x9/0x20 [ 506.073590][T11708] kmem_cache_alloc+0x69/0x3b0 [ 506.078400][T11708] ? kfree_skb_reason+0x10e/0x210 [ 506.083556][T11708] skb_clone+0x171/0x3c0 [ 506.087916][T11708] dev_queue_xmit_nit+0x38b/0xb80 [ 506.092994][T11708] dev_hard_start_xmit+0x59/0x6c0 [ 506.098065][T11708] sch_direct_xmit+0x1ac/0xc20 [ 506.102856][T11708] ? lock_sync+0x190/0x190 [ 506.107308][T11708] ? dev_watchdog+0x8f0/0x8f0 [ 506.112021][T11708] ? do_raw_spin_trylock+0xb1/0x180 [ 506.117260][T11708] ? do_raw_spin_lock+0x200/0x2b0 [ 506.122328][T11708] __dev_queue_xmit+0x1282/0x3d80 [ 506.127406][T11708] ? netdev_core_pick_tx+0x390/0x390 [ 506.132731][T11708] ? skb_partial_csum_set+0x202/0x390 [ 506.138148][T11708] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 506.144778][T11708] ? packet_release+0xdc0/0xdc0 [ 506.149666][T11708] packet_xmit+0x257/0x380 [ 506.154118][T11708] packet_sendmsg+0x24c7/0x5570 [ 506.159018][T11708] ? preempt_count_sub+0x150/0x150 [ 506.164195][T11708] ? lock_release+0x4bf/0x680 [ 506.168902][T11708] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.174843][T11708] ? aa_sk_perm+0x2c1/0xae0 [ 506.179368][T11708] ? get_pid_task+0xeb/0x250 [ 506.184011][T11708] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 506.189936][T11708] ? aa_af_perm+0x260/0x260 [ 506.194466][T11708] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 506.199788][T11708] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 506.205723][T11708] sock_sendmsg+0xd9/0x180 [ 506.210175][T11708] __sys_sendto+0x255/0x340 [ 506.214704][T11708] ? __ia32_sys_getpeername+0xb0/0xb0 [ 506.220101][T11708] ? vfs_write+0x14c/0xe40 [ 506.224544][T11708] ? __fget_files+0x279/0x410 [ 506.229335][T11708] ? ksys_write+0x1a7/0x250 [ 506.233899][T11708] ? __ia32_sys_read+0xb0/0xb0 [ 506.238688][T11708] __x64_sys_sendto+0xe0/0x1b0 [ 506.243489][T11708] ? syscall_enter_from_user_mode+0x26/0x80 [ 506.249417][T11708] do_syscall_64+0x38/0xb0 [ 506.253889][T11708] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 506.259910][T11708] RIP: 0033:0x7fca7227cae9 [ 506.264350][T11708] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 506.284156][T11708] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.292586][T11708] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 506.300594][T11708] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 506.308587][T11708] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 506.316579][T11708] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 506.324575][T11708] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 506.332578][T11708] 02:01:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 2) 02:01:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0x258, 0xa00, 0x10, 0xd6e3, 0x9, 0x4, 0x2, {0x4, 0x20}, {0x5, 0x9}, {0xfffffac4}, {0xc4b5, 0x7, 0x1}, 0x2, 0x10, 0xffffffe1, 0x800, 0x0, 0x9, 0x7f, 0x1f, 0x7fffffff, 0x3f, 0x0, 0x4, 0x4, 0x1, 0x1, 0x1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x680600, 0x0) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000006, 0x13, r2, 0x0) (async) r4 = epoll_create(0xe823) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)=0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r6}, 0x18) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="add974eba3eb5c133c858000dfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec801fcdab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) socket(0x11, 0x4, 0x1) 02:01:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:42 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000002, 0x0, 0x0) 02:01:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x320, 0x258, 0xa00, 0x10, 0xd6e3, 0x9, 0x4, 0x2, {0x4, 0x20}, {0x5, 0x9}, {0xfffffac4}, {0xc4b5, 0x7, 0x1}, 0x2, 0x10, 0xffffffe1, 0x800, 0x0, 0x9, 0x7f, 0x1f, 0x7fffffff, 0x3f, 0x0, 0x4, 0x4, 0x1, 0x1, 0x1}) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x680600, 0x0) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000006, 0x13, r2, 0x0) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000006, 0x13, r2, 0x0) epoll_create(0xe823) (async) r4 = epoll_create(0xe823) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$KVM_SMI(r5, 0xaeb7) (async) ioctl$KVM_SMI(r5, 0xaeb7) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000040)=0x2) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r6}, 0x18) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000080)="add974eba3eb5c133c858000dfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec801fcdab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) socket(0x11, 0x4, 0x1) 02:01:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 33) [ 506.471225][T11714] FAULT_INJECTION: forcing a failure. [ 506.471225][T11714] name failslab, interval 1, probability 0, space 0, times 0 [ 506.548499][T11714] CPU: 0 PID: 11714 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 506.558656][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 506.568771][T11714] Call Trace: [ 506.572095][T11714] [ 506.575066][T11714] dump_stack_lvl+0x125/0x1b0 [ 506.579804][T11714] should_fail_ex+0x496/0x5b0 [ 506.584550][T11714] should_failslab+0x9/0x20 [ 506.589298][T11714] __kmem_cache_alloc_node+0x2fd/0x350 [ 506.594819][T11714] ? tomoyo_encode2+0x100/0x3d0 [ 506.599726][T11714] ? tomoyo_encode2+0x100/0x3d0 [ 506.604636][T11714] __kmalloc+0x4f/0x100 [ 506.608961][T11714] tomoyo_encode2+0x100/0x3d0 [ 506.613718][T11714] ? rcu_is_watching+0x12/0xb0 [ 506.618542][T11714] tomoyo_encode+0x29/0x50 [ 506.623017][T11714] tomoyo_realpath_from_path+0x196/0x710 [ 506.628808][T11714] tomoyo_path_number_perm+0x243/0x590 [ 506.634487][T11714] ? tomoyo_path_number_perm+0x1eb/0x590 [ 506.640212][T11714] ? tomoyo_execute_permission+0x4a0/0x4a0 02:01:42 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x400, 0xf0, 0x320, 0x320, 0x1, 0x40, 0xf, 0x1, {0x7fffffff, 0x8, 0x1}, {0x9, 0x5, 0x1}, {0x1ebb, 0x0, 0x1}, {0x2, 0x2}, 0x2, 0x1, 0x7, 0x4, 0x0, 0x80000000, 0xa6, 0x5, 0x7fff, 0x8, 0x1df, 0x0, 0x10, 0x2}) r1 = dup(r0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x2130, 0x258, 0x0, 0x480, 0x2, 0x7, 0x20, 0x1, {0x1, 0x9, 0x1}, {0xfffffffc}, {0x7fff, 0x1000}, {0x13, 0x9, 0x1}, 0x0, 0x90, 0x0, 0x4, 0x1, 0xfffffff8, 0x7c97a3b1, 0x4, 0x9, 0xffffff9a, 0x9, 0xfffffffb, 0x11, 0x200, 0x3}) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = socket$rds(0x15, 0x5, 0x0) r4 = dup2(r3, r3) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001d00)) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000005c0)={0x1, 0x5, &(0x7f00000001c0)=[0xd106, 0x3, 0x67b, 0x5, 0x2389], &(0x7f0000000200)=[0xe5e, 0x1000, 0xb9c0, 0x100, 0xa6], &(0x7f00000004c0), &(0x7f0000000580)=[0xa99, 0x7, 0x9, 0x9, 0x1, 0x400]}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x1000009, 0x110, r1, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000000c0)="1063fcdb1508ae28e552b1362fc19cca3a32d4b47c09965c", 0x0, 0x18) [ 506.646072][T11714] ? lock_release+0x4bf/0x680 [ 506.650839][T11714] ? reacquire_held_locks+0x4b0/0x4b0 [ 506.656303][T11714] ? bit_wait_timeout+0x160/0x160 [ 506.661390][T11714] ? __fget_files+0x279/0x410 [ 506.666122][T11714] ? __fget_files+0x279/0x410 [ 506.670845][T11714] security_file_ioctl+0x72/0xb0 [ 506.675863][T11714] __x64_sys_ioctl+0xbb/0x210 [ 506.680618][T11714] do_syscall_64+0x38/0xb0 [ 506.685162][T11714] entry_SYSCALL_64_after_hwframe+0x63/0xcd 02:01:42 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 506.685208][T11714] RIP: 0033:0x7f147ae7cae9 [ 506.685232][T11714] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 02:01:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 3) [ 506.685264][T11714] RSP: 002b:00007f147bc480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.685296][T11714] RAX: ffffffffffffffda RBX: 00007f147af9bf80 RCX: 00007f147ae7cae9 02:01:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 34) [ 506.685317][T11714] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000004 [ 506.685339][T11714] RBP: 00007f147bc48120 R08: 0000000000000000 R09: 0000000000000000 02:01:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 4) [ 506.685361][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.685381][T11714] R13: 000000000000000b R14: 00007f147af9bf80 R15: 00007f147b0bfa48 02:01:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 35) [ 506.685414][T11714] [ 506.694883][T11729] FAULT_INJECTION: forcing a failure. [ 506.694883][T11729] name failslab, interval 1, probability 0, space 0, times 0 [ 506.694920][T11729] CPU: 1 PID: 11729 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 02:01:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 5) 02:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="d842d26dd69aa1decc4300"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 506.694956][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 506.694974][T11729] Call Trace: [ 506.694985][T11729] [ 506.694996][T11729] dump_stack_lvl+0x125/0x1b0 [ 506.695035][T11729] should_fail_ex+0x496/0x5b0 [ 506.695078][T11729] ? lock_sync+0x190/0x190 [ 506.695124][T11729] should_failslab+0x9/0x20 [ 506.695177][T11729] kmem_cache_alloc+0x69/0x3b0 [ 506.695223][T11729] ? kfree_skb_reason+0x10e/0x210 [ 506.695262][T11729] skb_clone+0x171/0x3c0 [ 506.695297][T11729] dev_queue_xmit_nit+0x38b/0xb80 [ 506.695357][T11729] dev_hard_start_xmit+0x59/0x6c0 [ 506.695420][T11729] sch_direct_xmit+0x1ac/0xc20 [ 506.695454][T11729] ? lock_sync+0x190/0x190 [ 506.695498][T11729] ? dev_watchdog+0x8f0/0x8f0 [ 506.695527][T11729] ? do_raw_spin_trylock+0xb1/0x180 [ 506.695584][T11729] ? do_raw_spin_lock+0x200/0x2b0 [ 506.695641][T11729] __dev_queue_xmit+0x1282/0x3d80 [ 506.695705][T11729] ? netdev_core_pick_tx+0x390/0x390 [ 506.695758][T11729] ? skb_partial_csum_set+0x202/0x390 [ 506.695811][T11729] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 506.695865][T11729] ? packet_release+0xdc0/0xdc0 [ 506.695909][T11729] packet_xmit+0x257/0x380 [ 506.695955][T11729] packet_sendmsg+0x24c7/0x5570 [ 506.696002][T11729] ? preempt_count_sub+0x150/0x150 [ 506.696043][T11729] ? lock_release+0x4bf/0x680 [ 506.696077][T11729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.696131][T11729] ? aa_sk_perm+0x2c1/0xae0 [ 506.696156][T11729] ? get_pid_task+0xeb/0x250 [ 506.696194][T11729] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 506.696233][T11729] ? aa_af_perm+0x260/0x260 [ 506.696263][T11729] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 506.696304][T11729] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 506.696344][T11729] sock_sendmsg+0xd9/0x180 [ 506.696386][T11729] __sys_sendto+0x255/0x340 [ 506.696419][T11729] ? __ia32_sys_getpeername+0xb0/0xb0 [ 506.696449][T11729] ? vfs_write+0x14c/0xe40 [ 506.696483][T11729] ? __fget_files+0x279/0x410 [ 506.696516][T11729] ? ksys_write+0x1a7/0x250 [ 506.696543][T11729] ? __ia32_sys_read+0xb0/0xb0 [ 506.696574][T11729] __x64_sys_sendto+0xe0/0x1b0 [ 506.696600][T11729] ? syscall_enter_from_user_mode+0x26/0x80 [ 506.696639][T11729] do_syscall_64+0x38/0xb0 [ 506.696667][T11729] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 506.696698][T11729] RIP: 0033:0x7fca7227cae9 [ 506.696719][T11729] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 506.696746][T11729] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.696772][T11729] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 506.696791][T11729] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 506.696808][T11729] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 506.696826][T11729] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 506.696844][T11729] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 506.696872][T11729] [ 506.739675][T11714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.863420][T11739] FAULT_INJECTION: forcing a failure. [ 506.863420][T11739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.863458][T11739] CPU: 1 PID: 11739 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 506.863492][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 506.863509][T11739] Call Trace: [ 506.863520][T11739] [ 506.863532][T11739] dump_stack_lvl+0x125/0x1b0 [ 506.863573][T11739] should_fail_ex+0x496/0x5b0 [ 506.863622][T11739] _copy_from_user+0x30/0xf0 02:01:43 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:43 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 36) 02:01:43 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 6) [ 506.863815][T11737] __nla_validate_parse: 15 callbacks suppressed [ 506.863830][T11737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.863695][T11739] binder_ioctl+0x565/0x6f00 [ 506.863866][T11739] ? __kmem_cache_free+0xb8/0x2f0 [ 506.863918][T11739] ? tomoyo_path_number_perm+0x190/0x590 [ 506.863953][T11739] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 506.863998][T11739] ? lock_release+0x4bf/0x680 [ 506.864040][T11739] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.864101][T11739] ? binder_thread_write+0x3a40/0x3a40 [ 506.864135][T11739] ? do_vfs_ioctl+0x379/0x1920 [ 506.864185][T11739] ? vfs_fileattr_set+0xbf0/0xbf0 [ 506.864243][T11739] ? reacquire_held_locks+0x4b0/0x4b0 [ 506.864290][T11739] ? bit_wait_timeout+0x160/0x160 [ 506.864350][T11739] ? __fget_files+0x279/0x410 [ 506.864381][T11739] ? bpf_lsm_file_ioctl+0x9/0x10 [ 506.864425][T11739] ? binder_thread_write+0x3a40/0x3a40 [ 506.864460][T11739] __x64_sys_ioctl+0x18f/0x210 [ 506.864508][T11739] do_syscall_64+0x38/0xb0 [ 506.864539][T11739] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 506.864573][T11739] RIP: 0033:0x7f147ae7cae9 [ 506.864595][T11739] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 506.864624][T11739] RSP: 002b:00007f147bc480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.864653][T11739] RAX: ffffffffffffffda RBX: 00007f147af9bf80 RCX: 00007f147ae7cae9 [ 506.864673][T11739] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000004 [ 506.864692][T11739] RBP: 00007f147bc48120 R08: 0000000000000000 R09: 0000000000000000 [ 506.864711][T11739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.864730][T11739] R13: 000000000000000b R14: 00007f147af9bf80 R15: 00007f147b0bfa48 [ 506.864760][T11739] [ 506.864968][T11739] binder: 11738:11739 ioctl c0306201 20000000 returned -14 [ 506.887505][T11741] FAULT_INJECTION: forcing a failure. [ 506.887505][T11741] name failslab, interval 1, probability 0, space 0, times 0 [ 506.887548][T11741] CPU: 1 PID: 11741 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 506.887586][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 506.887604][T11741] Call Trace: [ 506.887615][T11741] [ 506.887626][T11741] dump_stack_lvl+0x125/0x1b0 [ 506.887666][T11741] should_fail_ex+0x496/0x5b0 [ 506.887708][T11741] ? lock_sync+0x190/0x190 [ 506.887753][T11741] should_failslab+0x9/0x20 [ 506.887805][T11741] kmem_cache_alloc+0x69/0x3b0 [ 506.887850][T11741] ? kfree_skb_reason+0x10e/0x210 [ 506.887899][T11741] skb_clone+0x171/0x3c0 [ 506.887930][T11741] dev_queue_xmit_nit+0x38b/0xb80 [ 506.887978][T11741] dev_hard_start_xmit+0x59/0x6c0 [ 506.888028][T11741] sch_direct_xmit+0x1ac/0xc20 [ 506.888060][T11741] ? lock_sync+0x190/0x190 [ 506.888117][T11741] ? dev_watchdog+0x8f0/0x8f0 [ 506.888149][T11741] ? do_raw_spin_trylock+0xb1/0x180 [ 506.888197][T11741] ? do_raw_spin_lock+0x200/0x2b0 [ 506.888250][T11741] __dev_queue_xmit+0x1282/0x3d80 [ 506.888309][T11741] ? netdev_core_pick_tx+0x390/0x390 [ 506.888362][T11741] ? skb_partial_csum_set+0x202/0x390 [ 506.888420][T11741] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 506.888473][T11741] ? packet_release+0xdc0/0xdc0 [ 506.888528][T11741] packet_xmit+0x257/0x380 [ 506.888569][T11741] packet_sendmsg+0x24c7/0x5570 [ 506.888621][T11741] ? preempt_count_sub+0x150/0x150 [ 506.888665][T11741] ? lock_release+0x4bf/0x680 [ 506.888721][T11741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.888776][T11741] ? aa_sk_perm+0x2c1/0xae0 [ 506.888807][T11741] ? get_pid_task+0xeb/0x250 [ 506.888848][T11741] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 506.888894][T11741] ? aa_af_perm+0x260/0x260 [ 506.888930][T11741] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 506.888981][T11741] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 506.889030][T11741] sock_sendmsg+0xd9/0x180 [ 506.889080][T11741] __sys_sendto+0x255/0x340 [ 506.889112][T11741] ? __ia32_sys_getpeername+0xb0/0xb0 [ 506.889148][T11741] ? vfs_write+0x14c/0xe40 [ 506.889190][T11741] ? __fget_files+0x279/0x410 [ 506.889229][T11741] ? ksys_write+0x1a7/0x250 [ 506.889260][T11741] ? __ia32_sys_read+0xb0/0xb0 [ 506.889296][T11741] __x64_sys_sendto+0xe0/0x1b0 [ 506.889328][T11741] ? syscall_enter_from_user_mode+0x26/0x80 [ 506.889375][T11741] do_syscall_64+0x38/0xb0 [ 506.889416][T11741] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 506.889456][T11741] RIP: 0033:0x7fca7227cae9 [ 506.889482][T11741] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 506.889516][T11741] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 506.889549][T11741] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 506.889572][T11741] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 506.889593][T11741] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 506.889613][T11741] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 506.889634][T11741] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 506.889667][T11741] [ 506.940436][T11737] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 506.996507][T11746] FAULT_INJECTION: forcing a failure. [ 506.996507][T11746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.996549][T11746] CPU: 1 PID: 11746 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 506.996586][T11746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 506.996604][T11746] Call Trace: [ 506.996616][T11746] [ 506.996626][T11746] dump_stack_lvl+0x125/0x1b0 [ 506.996670][T11746] should_fail_ex+0x496/0x5b0 [ 506.996717][T11746] _copy_from_user+0x30/0xf0 [ 506.996769][T11746] binder_thread_write+0x6c9/0x3a40 [ 506.996816][T11746] ? rcu_is_watching+0x12/0xb0 [ 506.996847][T11746] ? binder_transaction+0x9a00/0x9a00 [ 506.996882][T11746] ? rcu_is_watching+0x12/0xb0 [ 506.996914][T11746] ? rcu_is_watching+0x12/0xb0 [ 506.996952][T11746] ? do_raw_spin_unlock+0x173/0x230 [ 506.997009][T11746] binder_ioctl+0x21b9/0x6f00 [ 506.997051][T11746] ? tomoyo_path_number_perm+0x190/0x590 [ 506.997089][T11746] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 506.997122][T11746] ? lock_release+0x4bf/0x680 [ 506.997167][T11746] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 506.997218][T11746] ? binder_thread_write+0x3a40/0x3a40 [ 506.997255][T11746] ? do_vfs_ioctl+0x379/0x1920 [ 506.997308][T11746] ? vfs_fileattr_set+0xbf0/0xbf0 [ 506.997369][T11746] ? reacquire_held_locks+0x4b0/0x4b0 [ 506.997421][T11746] ? bit_wait_timeout+0x160/0x160 [ 506.997471][T11746] ? __fget_files+0x279/0x410 [ 506.997503][T11746] ? bpf_lsm_file_ioctl+0x9/0x10 [ 506.997541][T11746] ? binder_thread_write+0x3a40/0x3a40 [ 506.997580][T11746] __x64_sys_ioctl+0x18f/0x210 [ 506.997633][T11746] do_syscall_64+0x38/0xb0 [ 506.997663][T11746] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 506.997700][T11746] RIP: 0033:0x7f147ae7cae9 [ 506.997725][T11746] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 506.997756][T11746] RSP: 002b:00007f147bc480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 506.997788][T11746] RAX: ffffffffffffffda RBX: 00007f147af9bf80 RCX: 00007f147ae7cae9 [ 506.997810][T11746] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000004 [ 506.997829][T11746] RBP: 00007f147bc48120 R08: 0000000000000000 R09: 0000000000000000 [ 506.997849][T11746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.997870][T11746] R13: 000000000000000b R14: 00007f147af9bf80 R15: 00007f147b0bfa48 [ 506.997902][T11746] [ 506.998051][T11746] binder: 11745:11746 ioctl c0306201 20000000 returned -14 [ 507.025560][T11748] FAULT_INJECTION: forcing a failure. [ 507.025560][T11748] name failslab, interval 1, probability 0, space 0, times 0 [ 507.025603][T11748] CPU: 0 PID: 11748 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 507.025642][T11748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 507.025661][T11748] Call Trace: [ 507.025673][T11748] [ 507.025684][T11748] dump_stack_lvl+0x125/0x1b0 [ 507.025729][T11748] should_fail_ex+0x496/0x5b0 [ 507.025774][T11748] ? lock_sync+0x190/0x190 [ 507.025821][T11748] should_failslab+0x9/0x20 [ 507.025874][T11748] kmem_cache_alloc+0x69/0x3b0 [ 507.025921][T11748] ? kfree_skb_reason+0x10e/0x210 [ 507.025963][T11748] skb_clone+0x171/0x3c0 [ 507.025998][T11748] dev_queue_xmit_nit+0x38b/0xb80 [ 507.026049][T11748] dev_hard_start_xmit+0x59/0x6c0 [ 507.026105][T11748] sch_direct_xmit+0x1ac/0xc20 [ 507.026141][T11748] ? lock_sync+0x190/0x190 [ 507.026184][T11748] ? dev_watchdog+0x8f0/0x8f0 [ 507.026214][T11748] ? do_raw_spin_trylock+0xb1/0x180 [ 507.026262][T11748] ? do_raw_spin_lock+0x200/0x2b0 [ 507.026319][T11748] __dev_queue_xmit+0x1282/0x3d80 [ 507.026380][T11748] ? netdev_core_pick_tx+0x390/0x390 [ 507.026435][T11748] ? skb_partial_csum_set+0x202/0x390 [ 507.026490][T11748] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 507.026553][T11748] ? packet_release+0xdc0/0xdc0 [ 507.026600][T11748] packet_xmit+0x257/0x380 [ 507.026647][T11748] packet_sendmsg+0x24c7/0x5570 [ 507.026703][T11748] ? preempt_count_sub+0x150/0x150 [ 507.026753][T11748] ? lock_release+0x4bf/0x680 [ 507.026794][T11748] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.026852][T11748] ? aa_sk_perm+0x2c1/0xae0 [ 507.026883][T11748] ? get_pid_task+0xeb/0x250 [ 507.026929][T11748] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 507.026974][T11748] ? aa_af_perm+0x260/0x260 [ 507.027012][T11748] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.027062][T11748] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 507.027111][T11748] sock_sendmsg+0xd9/0x180 [ 507.027163][T11748] __sys_sendto+0x255/0x340 [ 507.027196][T11748] ? __ia32_sys_getpeername+0xb0/0xb0 [ 507.027232][T11748] ? vfs_write+0x14c/0xe40 [ 507.027273][T11748] ? __fget_files+0x279/0x410 [ 507.027314][T11748] ? ksys_write+0x1a7/0x250 [ 507.027346][T11748] ? __ia32_sys_read+0xb0/0xb0 [ 507.027383][T11748] __x64_sys_sendto+0xe0/0x1b0 [ 507.027416][T11748] ? syscall_enter_from_user_mode+0x26/0x80 [ 507.027463][T11748] do_syscall_64+0x38/0xb0 [ 507.027503][T11748] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 507.027543][T11748] RIP: 0033:0x7fca7227cae9 [ 507.027569][T11748] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 507.027602][T11748] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 507.027634][T11748] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 507.027657][T11748] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 507.027678][T11748] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 507.027700][T11748] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 507.027721][T11748] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 507.027755][T11748] [ 507.104947][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.113621][T11751] FAULT_INJECTION: forcing a failure. [ 507.113621][T11751] name failslab, interval 1, probability 0, space 0, times 0 [ 507.113660][T11751] CPU: 1 PID: 11751 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 507.113696][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 507.113714][T11751] Call Trace: [ 507.113725][T11751] [ 507.113736][T11751] dump_stack_lvl+0x125/0x1b0 [ 507.113777][T11751] should_fail_ex+0x496/0x5b0 [ 507.113824][T11751] should_failslab+0x9/0x20 [ 507.113876][T11751] __kmem_cache_alloc_node+0x2fd/0x350 [ 507.113934][T11751] ? binder_transaction+0xb92/0x9a00 [ 507.113977][T11751] kmalloc_trace+0x25/0xe0 [ 507.114036][T11751] binder_transaction+0xb92/0x9a00 [ 507.114083][T11751] ? rcu_is_watching+0x12/0xb0 [ 507.114118][T11751] ? __orc_find+0x104/0x130 [ 507.114166][T11751] ? is_bpf_text_address+0x79/0x1a0 [ 507.114218][T11751] ? reacquire_held_locks+0x4b0/0x4b0 [ 507.114273][T11751] ? __read_once_word_nocheck+0x9/0x10 [ 507.114323][T11751] ? unwind_next_frame+0x51/0x2390 [ 507.114370][T11751] ? __orc_find+0x104/0x130 [ 507.114416][T11751] ? stack_access_ok+0xf9/0x270 [ 507.114462][T11751] ? __module_address+0x55/0x3b0 [ 507.114501][T11751] ? binder_deferred_func+0x1260/0x1260 [ 507.114538][T11751] ? is_bpf_text_address+0x9b/0x1a0 [ 507.114607][T11751] ? kernel_text_address+0x85/0xf0 [ 507.114656][T11751] ? __kernel_text_address+0xd/0x30 [ 507.114703][T11751] ? unwind_get_return_address+0x45/0xe0 [ 507.114757][T11751] ? arch_stack_walk+0x112/0x170 [ 507.114796][T11751] ? rcu_is_watching+0x12/0xb0 [ 507.114827][T11751] ? rcu_is_watching+0x12/0xb0 [ 507.114856][T11751] ? lock_release+0x4bf/0x680 [ 507.114898][T11751] ? __might_fault+0xe5/0x190 [ 507.114946][T11751] ? reacquire_held_locks+0x4b0/0x4b0 [ 507.114997][T11751] ? lock_release+0x4bf/0x680 [ 507.115047][T11751] ? preempt_count_sub+0x150/0x150 [ 507.115102][T11751] ? kasan_set_track+0x25/0x30 [ 507.115153][T11751] ? kasan_save_free_info+0x2b/0x40 [ 507.115197][T11751] binder_thread_write+0x717/0x3a40 [ 507.115244][T11751] ? rcu_is_watching+0x12/0xb0 [ 507.115275][T11751] ? binder_transaction+0x9a00/0x9a00 [ 507.115311][T11751] ? rcu_is_watching+0x12/0xb0 [ 507.115342][T11751] ? rcu_is_watching+0x12/0xb0 [ 507.115381][T11751] ? do_raw_spin_unlock+0x173/0x230 [ 507.115439][T11751] binder_ioctl+0x21b9/0x6f00 [ 507.115483][T11751] ? tomoyo_path_number_perm+0x190/0x590 [ 507.115521][T11751] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 507.115555][T11751] ? lock_release+0x4bf/0x680 [ 507.115604][T11751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.115659][T11751] ? binder_thread_write+0x3a40/0x3a40 [ 507.115697][T11751] ? do_vfs_ioctl+0x379/0x1920 [ 507.115750][T11751] ? vfs_fileattr_set+0xbf0/0xbf0 [ 507.115811][T11751] ? reacquire_held_locks+0x4b0/0x4b0 [ 507.115854][T11751] ? bit_wait_timeout+0x160/0x160 [ 507.115907][T11751] ? __fget_files+0x279/0x410 [ 507.115940][T11751] ? bpf_lsm_file_ioctl+0x9/0x10 [ 507.115979][T11751] ? binder_thread_write+0x3a40/0x3a40 [ 507.116027][T11751] __x64_sys_ioctl+0x18f/0x210 [ 507.116082][T11751] do_syscall_64+0x38/0xb0 [ 507.116117][T11751] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 507.116170][T11751] RIP: 0033:0x7f147ae7cae9 [ 507.116196][T11751] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 507.116228][T11751] RSP: 002b:00007f147bc480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.116261][T11751] RAX: ffffffffffffffda RBX: 00007f147af9bf80 RCX: 00007f147ae7cae9 [ 507.116283][T11751] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000004 [ 507.116303][T11751] RBP: 00007f147bc48120 R08: 0000000000000000 R09: 0000000000000000 [ 507.116324][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.116344][T11751] R13: 000000000000000b R14: 00007f147af9bf80 R15: 00007f147b0bfa48 [ 507.116376][T11751] [ 507.143123][T11752] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.563670][T11755] FAULT_INJECTION: forcing a failure. [ 507.563670][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 507.563710][T11755] CPU: 1 PID: 11755 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 507.563758][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 507.563776][T11755] Call Trace: [ 507.563788][T11755] [ 507.563799][T11755] dump_stack_lvl+0x125/0x1b0 [ 507.563861][T11755] should_fail_ex+0x496/0x5b0 [ 507.563909][T11755] ? lock_sync+0x190/0x190 [ 507.563957][T11755] should_failslab+0x9/0x20 [ 507.564009][T11755] kmem_cache_alloc+0x69/0x3b0 [ 507.564056][T11755] ? kfree_skb_reason+0x10e/0x210 [ 507.564097][T11755] skb_clone+0x171/0x3c0 [ 507.564132][T11755] dev_queue_xmit_nit+0x38b/0xb80 [ 507.564185][T11755] dev_hard_start_xmit+0x59/0x6c0 [ 507.564240][T11755] sch_direct_xmit+0x1ac/0xc20 [ 507.564276][T11755] ? lock_sync+0x190/0x190 [ 507.564318][T11755] ? dev_watchdog+0x8f0/0x8f0 [ 507.564348][T11755] ? do_raw_spin_trylock+0xb1/0x180 [ 507.564394][T11755] ? do_raw_spin_lock+0x200/0x2b0 [ 507.564446][T11755] __dev_queue_xmit+0x1282/0x3d80 [ 507.564515][T11755] ? netdev_core_pick_tx+0x390/0x390 [ 507.564569][T11755] ? skb_partial_csum_set+0x202/0x390 [ 507.564636][T11755] ? virtio_net_hdr_to_skb.constprop.0+0x4d9/0x11e0 [ 507.564688][T11755] ? packet_release+0xdc0/0xdc0 [ 507.564731][T11755] packet_xmit+0x257/0x380 [ 507.564773][T11755] packet_sendmsg+0x24c7/0x5570 [ 507.564827][T11755] ? preempt_count_sub+0x150/0x150 [ 507.564875][T11755] ? lock_release+0x4bf/0x680 [ 507.564940][T11755] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.565001][T11755] ? aa_sk_perm+0x2c1/0xae0 [ 507.565034][T11755] ? get_pid_task+0xeb/0x250 [ 507.565080][T11755] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 507.565125][T11755] ? aa_af_perm+0x260/0x260 [ 507.565160][T11755] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.565207][T11755] ? packet_lookup_frame.isra.0+0x1c0/0x1c0 [ 507.565254][T11755] sock_sendmsg+0xd9/0x180 [ 507.565304][T11755] __sys_sendto+0x255/0x340 [ 507.565336][T11755] ? __ia32_sys_getpeername+0xb0/0xb0 [ 507.565369][T11755] ? vfs_write+0x14c/0xe40 [ 507.565408][T11755] ? __fget_files+0x279/0x410 [ 507.565448][T11755] ? ksys_write+0x1a7/0x250 [ 507.565479][T11755] ? __ia32_sys_read+0xb0/0xb0 [ 507.565523][T11755] __x64_sys_sendto+0xe0/0x1b0 [ 507.565556][T11755] ? syscall_enter_from_user_mode+0x26/0x80 [ 507.565601][T11755] do_syscall_64+0x38/0xb0 [ 507.565634][T11755] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 507.565670][T11755] RIP: 0033:0x7fca7227cae9 [ 507.565694][T11755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 507.565726][T11755] RSP: 002b:00007fca72f470c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 507.565758][T11755] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227cae9 [ 507.565780][T11755] RDX: 0000000000003287 RSI: 0000000020000080 RDI: 0000000000000003 [ 507.565800][T11755] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 507.565821][T11755] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 507.565841][T11755] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 507.565875][T11755] [ 507.581932][T11756] FAULT_INJECTION: forcing a failure. [ 507.581932][T11756] name failslab, interval 1, probability 0, space 0, times 0 [ 509.376825][T11756] CPU: 1 PID: 11756 Comm: syz-executor.0 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 509.376868][T11756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 509.376889][T11756] Call Trace: [ 509.376901][T11756] [ 509.376912][T11756] dump_stack_lvl+0x125/0x1b0 [ 509.376959][T11756] should_fail_ex+0x496/0x5b0 [ 509.377006][T11756] should_failslab+0x9/0x20 [ 509.377060][T11756] __kmem_cache_alloc_node+0x2fd/0x350 [ 509.377111][T11756] ? binder_transaction+0xc72/0x9a00 [ 509.377147][T11756] ? lockdep_init_map_type+0x16d/0x7c0 [ 509.377196][T11756] kmalloc_trace+0x25/0xe0 [ 509.377247][T11756] binder_transaction+0xc72/0x9a00 [ 509.377293][T11756] ? rcu_is_watching+0x12/0xb0 [ 509.377328][T11756] ? __orc_find+0x104/0x130 [ 509.377381][T11756] ? is_bpf_text_address+0x79/0x1a0 [ 509.377435][T11756] ? reacquire_held_locks+0x4b0/0x4b0 [ 509.377481][T11756] ? __read_once_word_nocheck+0x9/0x10 [ 509.377532][T11756] ? unwind_next_frame+0x51/0x2390 [ 509.377583][T11756] ? __orc_find+0x104/0x130 [ 509.377629][T11756] ? stack_access_ok+0xf9/0x270 [ 509.377679][T11756] ? __module_address+0x55/0x3b0 [ 509.377727][T11756] ? binder_deferred_func+0x1260/0x1260 [ 509.377767][T11756] ? is_bpf_text_address+0x9b/0x1a0 [ 509.377818][T11756] ? kernel_text_address+0x85/0xf0 [ 509.377880][T11756] ? __kernel_text_address+0xd/0x30 [ 509.377927][T11756] ? unwind_get_return_address+0x45/0xe0 [ 509.377978][T11756] ? arch_stack_walk+0x112/0x170 [ 509.378015][T11756] ? rcu_is_watching+0x12/0xb0 [ 509.378046][T11756] ? rcu_is_watching+0x12/0xb0 [ 509.378075][T11756] ? lock_release+0x4bf/0x680 [ 509.378116][T11756] ? __might_fault+0xe5/0x190 [ 509.378163][T11756] ? reacquire_held_locks+0x4b0/0x4b0 [ 509.378206][T11756] ? lock_release+0x4bf/0x680 [ 509.378249][T11756] ? preempt_count_sub+0x150/0x150 [ 509.378299][T11756] ? kasan_set_track+0x25/0x30 [ 509.378343][T11756] ? kasan_save_free_info+0x2b/0x40 [ 509.378384][T11756] binder_thread_write+0x717/0x3a40 [ 509.378428][T11756] ? rcu_is_watching+0x12/0xb0 [ 509.378457][T11756] ? binder_transaction+0x9a00/0x9a00 [ 509.378492][T11756] ? rcu_is_watching+0x12/0xb0 [ 509.378523][T11756] ? rcu_is_watching+0x12/0xb0 [ 509.378560][T11756] ? do_raw_spin_unlock+0x173/0x230 [ 509.378617][T11756] binder_ioctl+0x21b9/0x6f00 [ 509.378658][T11756] ? tomoyo_path_number_perm+0x190/0x590 [ 509.378704][T11756] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 509.378737][T11756] ? lock_release+0x4bf/0x680 [ 509.378781][T11756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 509.378833][T11756] ? binder_thread_write+0x3a40/0x3a40 [ 509.378868][T11756] ? do_vfs_ioctl+0x379/0x1920 [ 509.378920][T11756] ? vfs_fileattr_set+0xbf0/0xbf0 [ 509.378979][T11756] ? reacquire_held_locks+0x4b0/0x4b0 [ 509.379019][T11756] ? bit_wait_timeout+0x160/0x160 [ 509.379071][T11756] ? __fget_files+0x279/0x410 [ 509.379103][T11756] ? bpf_lsm_file_ioctl+0x9/0x10 [ 509.379140][T11756] ? binder_thread_write+0x3a40/0x3a40 [ 509.379177][T11756] __x64_sys_ioctl+0x18f/0x210 [ 509.379230][T11756] do_syscall_64+0x38/0xb0 [ 509.379263][T11756] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 509.379301][T11756] RIP: 0033:0x7f147ae7cae9 [ 509.379325][T11756] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 509.379357][T11756] RSP: 002b:00007f147bc480c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.379388][T11756] RAX: ffffffffffffffda RBX: 00007f147af9bf80 RCX: 00007f147ae7cae9 [ 509.379409][T11756] RDX: 0000000020000000 RSI: 00000000c0306201 RDI: 0000000000000004 02:01:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x400, 0xf0, 0x320, 0x320, 0x1, 0x40, 0xf, 0x1, {0x7fffffff, 0x8, 0x1}, {0x9, 0x5, 0x1}, {0x1ebb, 0x0, 0x1}, {0x2, 0x2}, 0x2, 0x1, 0x7, 0x4, 0x0, 0x80000000, 0xa6, 0x5, 0x7fff, 0x8, 0x1df, 0x0, 0x10, 0x2}) r1 = dup(r0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x2130, 0x258, 0x0, 0x480, 0x2, 0x7, 0x20, 0x1, {0x1, 0x9, 0x1}, {0xfffffffc}, {0x7fff, 0x1000}, {0x13, 0x9, 0x1}, 0x0, 0x90, 0x0, 0x4, 0x1, 0xfffffff8, 0x7c97a3b1, 0x4, 0x9, 0xffffff9a, 0x9, 0xfffffffb, 0x11, 0x200, 0x3}) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = socket$rds(0x15, 0x5, 0x0) r4 = dup2(r3, r3) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001d00)) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000005c0)={0x1, 0x5, &(0x7f00000001c0)=[0xd106, 0x3, 0x67b, 0x5, 0x2389], &(0x7f0000000200)=[0xe5e, 0x1000, 0xb9c0, 0x100, 0xa6], &(0x7f00000004c0), &(0x7f0000000580)=[0xa99, 0x7, 0x9, 0x9, 0x1, 0x400]}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x1000009, 0x110, r1, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000000c0)="1063fcdb1508ae28e552b1362fc19cca3a32d4b47c09965c", 0x0, 0x18) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x400, 0xf0, 0x320, 0x320, 0x1, 0x40, 0xf, 0x1, {0x7fffffff, 0x8, 0x1}, {0x9, 0x5, 0x1}, {0x1ebb, 0x0, 0x1}, {0x2, 0x2}, 0x2, 0x1, 0x7, 0x4, 0x0, 0x80000000, 0xa6, 0x5, 0x7fff, 0x8, 0x1df, 0x0, 0x10, 0x2}) (async) dup(r0) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x2130, 0x258, 0x0, 0x480, 0x2, 0x7, 0x20, 0x1, {0x1, 0x9, 0x1}, {0xfffffffc}, {0x7fff, 0x1000}, {0x13, 0x9, 0x1}, 0x0, 0x90, 0x0, 0x4, 0x1, 0xfffffff8, 0x7c97a3b1, 0x4, 0x9, 0xffffff9a, 0x9, 0xfffffffb, 0x11, 0x200, 0x3}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) socket$rds(0x15, 0x5, 0x0) (async) dup2(r3, r3) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001d00)) (async) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000005c0)={0x1, 0x5, &(0x7f00000001c0)=[0xd106, 0x3, 0x67b, 0x5, 0x2389], &(0x7f0000000200)=[0xe5e, 0x1000, 0xb9c0, 0x100, 0xa6], &(0x7f00000004c0), &(0x7f0000000580)=[0xa99, 0x7, 0x9, 0x9, 0x1, 0x400]}) (async) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x1000009, 0x110, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000000c0)="1063fcdb1508ae28e552b1362fc19cca3a32d4b47c09965c", 0x0, 0x18) (async) 02:01:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (fail_nth: 37) 02:01:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="d842d26dd69aa1decc4300"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:45 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:45 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 509.379429][T11756] RBP: 00007f147bc48120 R08: 0000000000000000 R09: 0000000000000000 [ 509.379449][T11756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.379469][T11756] R13: 000000000000000b R14: 00007f147af9bf80 R15: 00007f147b0bfa48 [ 509.379501][T11756] [ 509.876826][T11772] net_ratelimit: 40 callbacks suppressed [ 509.876846][T11772] protocol 894f is buggy, dev ip6gretap0 [ 509.888342][T11772] protocol 894f is buggy, dev ip6gretap0 [ 509.894080][T11772] protocol 894f is buggy, dev ip6gretap0 [ 509.899845][T11772] protocol 894f is buggy, dev ip6gretap0 [ 509.905569][T11772] protocol 894f is buggy, dev ip6gretap0 [ 509.911333][T11772] protocol 894f is buggy, dev ip6gretap0 [ 509.917072][T11772] protocol 894f is buggy, dev ip6gretap0 02:01:45 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x400, 0xf0, 0x320, 0x320, 0x1, 0x40, 0xf, 0x1, {0x7fffffff, 0x8, 0x1}, {0x9, 0x5, 0x1}, {0x1ebb, 0x0, 0x1}, {0x2, 0x2}, 0x2, 0x1, 0x7, 0x4, 0x0, 0x80000000, 0xa6, 0x5, 0x7fff, 0x8, 0x1df, 0x0, 0x10, 0x2}) r1 = dup(r0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x2130, 0x258, 0x0, 0x480, 0x2, 0x7, 0x20, 0x1, {0x1, 0x9, 0x1}, {0xfffffffc}, {0x7fff, 0x1000}, {0x13, 0x9, 0x1}, 0x0, 0x90, 0x0, 0x4, 0x1, 0xfffffff8, 0x7c97a3b1, 0x4, 0x9, 0xffffff9a, 0x9, 0xfffffffb, 0x11, 0x200, 0x3}) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) r3 = socket$rds(0x15, 0x5, 0x0) r4 = dup2(r3, r3) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001d00)) (async) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000001d00)) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000005c0)={0x1, 0x5, &(0x7f00000001c0)=[0xd106, 0x3, 0x67b, 0x5, 0x2389], &(0x7f0000000200)=[0xe5e, 0x1000, 0xb9c0, 0x100, 0xa6], &(0x7f00000004c0), &(0x7f0000000580)=[0xa99, 0x7, 0x9, 0x9, 0x1, 0x400]}) (async) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f00000005c0)={0x1, 0x5, &(0x7f00000001c0)=[0xd106, 0x3, 0x67b, 0x5, 0x2389], &(0x7f0000000200)=[0xe5e, 0x1000, 0xb9c0, 0x100, 0xa6], &(0x7f00000004c0), &(0x7f0000000580)=[0xa99, 0x7, 0x9, 0x9, 0x1, 0x400]}) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, 0x930, 0x1000009, 0x110, r1, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000000c0)="1063fcdb1508ae28e552b1362fc19cca3a32d4b47c09965c", 0x0, 0x18) (async) syz_memcpy_off$KVM_EXIT_MMIO(r5, 0x20, &(0x7f00000000c0)="1063fcdb1508ae28e552b1362fc19cca3a32d4b47c09965c", 0x0, 0x18) 02:01:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 509.917524][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 509.922802][T11772] protocol 894f is buggy, dev ip6gretap0 02:01:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 509.996544][T11780] binder: BINDER_SET_CONTEXT_MGR already set [ 509.997753][T11772] FAULT_INJECTION: forcing a failure. [ 509.997753][T11772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.012312][T11780] binder: 11778:11780 ioctl 4018620d 20000080 returned -16 [ 510.029216][T11773] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="d842d26dd69aa1decc4300"]) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 510.059823][T11772] CPU: 0 PID: 11772 Comm: syz-executor.5 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 02:01:45 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 510.059865][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 510.059883][T11772] Call Trace: [ 510.059895][T11772] [ 510.059906][T11772] dump_stack_lvl+0x125/0x1b0 [ 510.059948][T11772] should_fail_ex+0x496/0x5b0 [ 510.059994][T11772] _copy_to_user+0x30/0xb0 [ 510.060045][T11772] simple_read_from_buffer+0xd0/0x150 02:01:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 510.060085][T11772] proc_fail_nth_read+0x1b0/0x290 [ 510.060134][T11772] ? proc_sessionid_read+0x290/0x290 [ 510.060193][T11772] ? security_file_permission+0xdc/0x100 [ 510.060238][T11772] ? proc_sessionid_read+0x290/0x290 [ 510.060283][T11772] vfs_read+0x1ce/0x930 [ 510.060321][T11772] ? kernel_read+0x1b0/0x1b0 [ 510.060357][T11772] ? __fget_files+0x279/0x410 [ 510.060398][T11772] ksys_read+0x12f/0x250 [ 510.060430][T11772] ? vfs_write+0xe40/0xe40 [ 510.060462][T11772] ? rcu_is_watching+0x12/0xb0 [ 510.060492][T11772] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 510.060532][T11772] do_syscall_64+0x38/0xb0 [ 510.060564][T11772] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 510.060605][T11772] RIP: 0033:0x7fca7227b78c [ 510.060629][T11772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 510.060662][T11772] RSP: 002b:00007fca72f470c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.060702][T11772] RAX: ffffffffffffffda RBX: 00007fca7239bf80 RCX: 00007fca7227b78c [ 510.060723][T11772] RDX: 000000000000000f RSI: 00007fca72f47130 RDI: 0000000000000004 [ 510.060744][T11772] RBP: 00007fca72f47120 R08: 0000000000000000 R09: 00000000000002ff [ 510.060764][T11772] R10: 0000000004000002 R11: 0000000000000246 R12: 0000000000000002 [ 510.060790][T11772] R13: 000000000000000b R14: 00007fca7239bf80 R15: 00007fca724bfa48 [ 510.060824][T11772] [ 510.130715][T11786] binder: 11783:11786 ioctl 10 20000000 returned -22 02:01:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0xee00, &(0x7f0000000040)={0x8b, 0xb, 0xcb01, 0xf6, 0x400, 0xfffffffffffffe00, 0x101, 0xe7eb, 0x401}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70003935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 510.144202][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.293671][T11794] binder: BINDER_SET_CONTEXT_MGR already set [ 510.320327][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.324752][T11794] binder: 11791:11794 ioctl 4018620d 20000080 returned -16 02:01:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 510.374391][T11794] binder: 11791:11794 ioctl 541b 20000000 returned -22 [ 510.437842][T11798] protocol 894f is buggy, dev ip6gretap0 [ 510.443676][T11798] protocol 894f is buggy, dev ip6gretap0 02:01:46 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a701", 0x36, 0x4000002, 0x0, 0x0) 02:01:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0xdf4135d7409c4aab, 0x0, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="9c0a4296743dbe3fec0b523a1ecf9c47ea24d35e5b5d78e076403afe8be7a63461ee", 0x22}, {&(0x7f00000001c0)="6c1ffed129c1f83d800edcb68f43d2ea50c2886f089fa6e781d449899e6a815b38f3851fce3e163c2954f159774e94adbde468be4455c12cf7f7ece335f72e47b0bade53", 0x44}, {&(0x7f0000000240)="e43dc28b683a36965ffc8a9a4895c84bf3643826661d3740ab4f23408a97327fcbb646ebe53421929e3ef6f58b18c29d7a527ac2062f6ff5dcfdd49c038a772a77b928a460f1372e6757653daa0ed85bba3b81a01e643178e727f0e81548dc1cfb0702e83b0c27538bf64e7851f8df5e711145812f8df72e246bc4a9890806ae2e5e9378fabb4a8e8a1cf89f614a5dd270270d1c39556534c8a0f53d3ed56aabb751edee3b1ed6ad0a8ebded50ce77e99b635b16cff1", 0xb6}, {&(0x7f0000000300)="b28794c55c55dc8920f26e994e6f327cd0fe7dc9d319b3e498ff16b63717cfe630dd38d3ab836b537d8a3eba784d6ced98f83853e3fcea342ec752a7c35a8aeb18b025bf1627288cb396097f50e6ef5746f2e1d012226c123a079a28a0cf5893a5f6dfea6a24a7f71e3fe82d3590da5a9ca8386eda874d6297dfb0efe3d73acc362a47927a0a691187e73e8c2daf71e7ce86917caece2ab4ba1b204fe185de94c7f026a1d678140a3607d4ed4be15c9208", 0xb1}], 0x4, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc01}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x48e9}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="f0b2f596b70ab202ccfddf6c90dd9d56b031fc82a1ab132654a650c1dd4e3db435c92506359cd7e2c208b49576df046df35abe1672cd219f2648fd0fc1aaabd8e543a51d1bb9d175b1767a22b6e864f82666f915b31032e7f8f8f3772b5b7645c30b920a5fec2016bd2a6b72baa8562e66e889100b28cb67c98698b7ec124d21c706acf1c476b68839273e7785f7b19ee88ce83c37610874ca73845cf722a2acdaf11864b2677746835a8678e4da1e6138bb69226c79", 0xb6}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xa4c5}}, @timestamping={{0x14, 0x1, 0x25, 0x28000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x67}}], 0x90}}, {{&(0x7f0000000700)=@xdp={0x2c, 0xd, r2, 0x2e}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="58efbf532119a33b8fd76a6707e9915408c84f33325af50e91fca246e0b938abb1ff3f8b210ff1df4cfa47dd168027f8765caaf41b186de85e17d541abc9c469cec4bb10db441eab1a4f689828b4bb8eb97f15e844a3bddcd3686ff8be83bcd69ed303a181466726f4fc5af40f962545eff8ec37ccf5413b58ea868f01126cf56388b30a2242d405a4840b8575ab039726f23d092ffc82c8639da7d75effb411c9ebf812f31b5a73b33d14837ded148476ed6f116e232adf0b8ad1fe4ba2df11198ab82c8ba482ffe52854eeb7b3568d20cab54fe3525f8d538e", 0xda}], 0x1, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}], 0x3, 0x8051) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = syz_open_dev$mouse(&(0x7f0000000a00), 0x1, 0x406282) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getnetconf={0x24, 0x52, 0x1215, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}]}, 0x24}}, 0x40815) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) bind$packet(r0, &(0x7f0000000000)={0x11, 0xd, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) 02:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, 0x0, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0xee00, &(0x7f0000000040)={0x8b, 0xb, 0xcb01, 0xf6, 0x400, 0xfffffffffffffe00, 0x101, 0xe7eb, 0x401}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0xee00, &(0x7f0000000040)={0x8b, 0xb, 0xcb01, 0xf6, 0x400, 0xfffffffffffffe00, 0x101, 0xe7eb, 0x401}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 510.743461][T11806] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0xee00, &(0x7f0000000040)={0x8b, 0xb, 0xcb01, 0xf6, 0x400, 0xfffffffffffffe00, 0x101, 0xe7eb, 0x401}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000802, 0xee00, &(0x7f0000000040)={0x8b, 0xb, 0xcb01, 0xf6, 0x400, 0xfffffffffffffe00, 0x101, 0xe7eb, 0x401}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:46 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0xdf4135d7409c4aab, 0x0, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="9c0a4296743dbe3fec0b523a1ecf9c47ea24d35e5b5d78e076403afe8be7a63461ee", 0x22}, {&(0x7f00000001c0)="6c1ffed129c1f83d800edcb68f43d2ea50c2886f089fa6e781d449899e6a815b38f3851fce3e163c2954f159774e94adbde468be4455c12cf7f7ece335f72e47b0bade53", 0x44}, {&(0x7f0000000240)="e43dc28b683a36965ffc8a9a4895c84bf3643826661d3740ab4f23408a97327fcbb646ebe53421929e3ef6f58b18c29d7a527ac2062f6ff5dcfdd49c038a772a77b928a460f1372e6757653daa0ed85bba3b81a01e643178e727f0e81548dc1cfb0702e83b0c27538bf64e7851f8df5e711145812f8df72e246bc4a9890806ae2e5e9378fabb4a8e8a1cf89f614a5dd270270d1c39556534c8a0f53d3ed56aabb751edee3b1ed6ad0a8ebded50ce77e99b635b16cff1", 0xb6}, {&(0x7f0000000300)="b28794c55c55dc8920f26e994e6f327cd0fe7dc9d319b3e498ff16b63717cfe630dd38d3ab836b537d8a3eba784d6ced98f83853e3fcea342ec752a7c35a8aeb18b025bf1627288cb396097f50e6ef5746f2e1d012226c123a079a28a0cf5893a5f6dfea6a24a7f71e3fe82d3590da5a9ca8386eda874d6297dfb0efe3d73acc362a47927a0a691187e73e8c2daf71e7ce86917caece2ab4ba1b204fe185de94c7f026a1d678140a3607d4ed4be15c9208", 0xb1}], 0x4, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc01}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x48e9}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="f0b2f596b70ab202ccfddf6c90dd9d56b031fc82a1ab132654a650c1dd4e3db435c92506359cd7e2c208b49576df046df35abe1672cd219f2648fd0fc1aaabd8e543a51d1bb9d175b1767a22b6e864f82666f915b31032e7f8f8f3772b5b7645c30b920a5fec2016bd2a6b72baa8562e66e889100b28cb67c98698b7ec124d21c706acf1c476b68839273e7785f7b19ee88ce83c37610874ca73845cf722a2acdaf11864b2677746835a8678e4da1e6138bb69226c79", 0xb6}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xa4c5}}, @timestamping={{0x14, 0x1, 0x25, 0x28000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x67}}], 0x90}}, {{&(0x7f0000000700)=@xdp={0x2c, 0xd, r2, 0x2e}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="58efbf532119a33b8fd76a6707e9915408c84f33325af50e91fca246e0b938abb1ff3f8b210ff1df4cfa47dd168027f8765caaf41b186de85e17d541abc9c469cec4bb10db441eab1a4f689828b4bb8eb97f15e844a3bddcd3686ff8be83bcd69ed303a181466726f4fc5af40f962545eff8ec37ccf5413b58ea868f01126cf56388b30a2242d405a4840b8575ab039726f23d092ffc82c8639da7d75effb411c9ebf812f31b5a73b33d14837ded148476ed6f116e232adf0b8ad1fe4ba2df11198ab82c8ba482ffe52854eeb7b3568d20cab54fe3525f8d538e", 0xda}], 0x1, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}], 0x3, 0x8051) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = syz_open_dev$mouse(&(0x7f0000000a00), 0x1, 0x406282) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getnetconf={0x24, 0x52, 0x1215, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}]}, 0x24}}, 0x40815) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) bind$packet(r0, &(0x7f0000000000)={0x11, 0xd, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) [ 510.837947][T11806] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, 0x0, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:46 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x1010, r1, 0x0) fcntl$dupfd(r1, 0x406, r1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:47 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0xdf4135d7409c4aab, 0x0, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) (async, rerun: 64) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="9c0a4296743dbe3fec0b523a1ecf9c47ea24d35e5b5d78e076403afe8be7a63461ee", 0x22}, {&(0x7f00000001c0)="6c1ffed129c1f83d800edcb68f43d2ea50c2886f089fa6e781d449899e6a815b38f3851fce3e163c2954f159774e94adbde468be4455c12cf7f7ece335f72e47b0bade53", 0x44}, {&(0x7f0000000240)="e43dc28b683a36965ffc8a9a4895c84bf3643826661d3740ab4f23408a97327fcbb646ebe53421929e3ef6f58b18c29d7a527ac2062f6ff5dcfdd49c038a772a77b928a460f1372e6757653daa0ed85bba3b81a01e643178e727f0e81548dc1cfb0702e83b0c27538bf64e7851f8df5e711145812f8df72e246bc4a9890806ae2e5e9378fabb4a8e8a1cf89f614a5dd270270d1c39556534c8a0f53d3ed56aabb751edee3b1ed6ad0a8ebded50ce77e99b635b16cff1", 0xb6}, {&(0x7f0000000300)="b28794c55c55dc8920f26e994e6f327cd0fe7dc9d319b3e498ff16b63717cfe630dd38d3ab836b537d8a3eba784d6ced98f83853e3fcea342ec752a7c35a8aeb18b025bf1627288cb396097f50e6ef5746f2e1d012226c123a079a28a0cf5893a5f6dfea6a24a7f71e3fe82d3590da5a9ca8386eda874d6297dfb0efe3d73acc362a47927a0a691187e73e8c2daf71e7ce86917caece2ab4ba1b204fe185de94c7f026a1d678140a3607d4ed4be15c9208", 0xb1}], 0x4, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc01}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x48e9}}, @timestamping={{0x14, 0x1, 0x25, 0x20}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xf0}}, {{&(0x7f00000004c0)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000540)="f0b2f596b70ab202ccfddf6c90dd9d56b031fc82a1ab132654a650c1dd4e3db435c92506359cd7e2c208b49576df046df35abe1672cd219f2648fd0fc1aaabd8e543a51d1bb9d175b1767a22b6e864f82666f915b31032e7f8f8f3772b5b7645c30b920a5fec2016bd2a6b72baa8562e66e889100b28cb67c98698b7ec124d21c706acf1c476b68839273e7785f7b19ee88ce83c37610874ca73845cf722a2acdaf11864b2677746835a8678e4da1e6138bb69226c79", 0xb6}], 0x1, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0xa4c5}}, @timestamping={{0x14, 0x1, 0x25, 0x28000}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x200}}, @mark={{0x14, 0x1, 0x24, 0x67}}], 0x90}}, {{&(0x7f0000000700)=@xdp={0x2c, 0xd, r2, 0x2e}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="58efbf532119a33b8fd76a6707e9915408c84f33325af50e91fca246e0b938abb1ff3f8b210ff1df4cfa47dd168027f8765caaf41b186de85e17d541abc9c469cec4bb10db441eab1a4f689828b4bb8eb97f15e844a3bddcd3686ff8be83bcd69ed303a181466726f4fc5af40f962545eff8ec37ccf5413b58ea868f01126cf56388b30a2242d405a4840b8575ab039726f23d092ffc82c8639da7d75effb411c9ebf812f31b5a73b33d14837ded148476ed6f116e232adf0b8ad1fe4ba2df11198ab82c8ba482ffe52854eeb7b3568d20cab54fe3525f8d538e", 0xda}], 0x1, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x30}}], 0x3, 0x8051) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) r3 = syz_open_dev$mouse(&(0x7f0000000a00), 0x1, 0x406282) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)=@ipv6_getnetconf={0x24, 0x52, 0x1215, 0x70bd2c, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r4}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}]}, 0x24}}, 0x40815) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) bind$packet(r0, &(0x7f0000000000)={0x11, 0xd, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) 02:01:47 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x1010, r1, 0x0) fcntl$dupfd(r1, 0x406, r1) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x1010, r1, 0x0) (async) fcntl$dupfd(r1, 0x406, r1) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, 0x0, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:47 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:47 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x1010, r1, 0x0) fcntl$dupfd(r1, 0x406, r1) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x8933, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:47 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) bind$pptp(r0, 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) r2 = dup(r1) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (async) [ 511.881545][T11857] binder: 11856:11857 ioctl 8933 20000000 returned -22 [ 511.896662][T11861] __nla_validate_parse: 5 callbacks suppressed [ 511.896685][T11861] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 511.939104][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.945512][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 02:01:48 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:48 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) bind$pptp(r0, 0x0, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) dup(r1) (async) r2 = dup(r1) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400448c9, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:48 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x40000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103440, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x9, 0x40, 0x101, 0xffffffe0}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:48 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(0xffffffffffffffff, 0x0, 0x0) (async) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) (async) bind$pptp(r0, 0x0, 0x0) (async) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x80000) r2 = dup(r1) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 512.656642][T11875] binder: BINDER_SET_CONTEXT_MGR already set [ 512.659598][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.671645][T11875] binder: 11870:11875 ioctl 4018620d 20000080 returned -16 02:01:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400448dd, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:48 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x40000) (async, rerun: 64) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async, rerun: 64) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103440, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x9, 0x40, 0x101, 0xffffffe0}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) (rerun: 32) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 512.701408][T11875] binder: 11870:11875 ioctl 400448c9 20000000 returned -22 [ 512.738094][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:48 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000000)=[0x3, 0x81], &(0x7f0000000040)=[0x1, 0x40, 0x9, 0x4], &(0x7f0000000080)=[0x9, 0x6, 0x0, 0x4, 0x4, 0x700, 0x1f34, 0x4], &(0x7f00000000c0)=[0x400, 0x2, 0x9, 0x0, 0x9, 0x400, 0x1000, 0x10b, 0x4]}) fadvise64(r0, 0xfffffffffffffff7, 0x1, 0x1) [ 512.846962][T11891] binder: 11889:11891 ioctl 400448dd 20000000 returned -22 [ 512.875493][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.946398][T11892] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:49 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe", 0x51, 0x4000002, 0x0, 0x0) 02:01:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400454ca, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:49 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r1 = socket$pptp(0x18, 0x1, 0x2) (rerun: 64) bind$pptp(r1, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x40000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x103440, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req={0x9, 0x40, 0x101, 0xffffffe0}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000000)=[0x3, 0x81], &(0x7f0000000040)=[0x1, 0x40, 0x9, 0x4], &(0x7f0000000080)=[0x9, 0x6, 0x0, 0x4, 0x4, 0x700, 0x1f34, 0x4], &(0x7f00000000c0)=[0x400, 0x2, 0x9, 0x0, 0x9, 0x400, 0x1000, 0x10b, 0x4]}) (async) fadvise64(r0, 0xfffffffffffffff7, 0x1, 0x1) 02:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) [ 513.579203][T11906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.601230][T11907] binder: BINDER_SET_CONTEXT_MGR already set [ 513.621679][T11907] binder: 11902:11907 ioctl 4018620d 20000080 returned -16 02:01:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) dup(r0) (async) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x3, 0x2, &(0x7f0000000000)=[0x3, 0x81], &(0x7f0000000040)=[0x1, 0x40, 0x9, 0x4], &(0x7f0000000080)=[0x9, 0x6, 0x0, 0x4, 0x4, 0x700, 0x1f34, 0x4], &(0x7f00000000c0)=[0x400, 0x2, 0x9, 0x0, 0x9, 0x400, 0x1000, 0x10b, 0x4]}) fadvise64(r0, 0xfffffffffffffff7, 0x1, 0x1) 02:01:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 513.634699][T11906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.653725][T11907] binder: 11902:11907 ioctl 400454ca 20000000 returned -22 02:01:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x550, 0x384, 0x3c00, 0x2000, 0x8001, 0x7, 0xf, 0x2, {0x9, 0x9, 0x1}, {0x5, 0x8}, {0x3ff, 0x476}, {0x1ff, 0x2}, 0x1, 0x1, 0xee, 0x4, 0x1, 0x10001, 0x3, 0xecc, 0x3, 0xff, 0x1, 0xfffffffb, 0x3c, 0x100, 0x3, 0x5}) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) [ 513.785865][T11923] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:49 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x550, 0x384, 0x3c00, 0x2000, 0x8001, 0x7, 0xf, 0x2, {0x9, 0x9, 0x1}, {0x5, 0x8}, {0x3ff, 0x476}, {0x1ff, 0x2}, 0x1, 0x1, 0xee, 0x4, 0x1, 0x10001, 0x3, 0xecc, 0x3, 0xff, 0x1, 0xfffffffb, 0x3c, 0x100, 0x3, 0x5}) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) dup(r0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x550, 0x384, 0x3c00, 0x2000, 0x8001, 0x7, 0xf, 0x2, {0x9, 0x9, 0x1}, {0x5, 0x8}, {0x3ff, 0x476}, {0x1ff, 0x2}, 0x1, 0x1, 0xee, 0x4, 0x1, 0x10001, 0x3, 0xecc, 0x3, 0xff, 0x1, 0xfffffffb, 0x3c, 0x100, 0x3, 0x5}) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 513.862218][T11923] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 513.947316][T11931] binder: BINDER_SET_CONTEXT_MGR already set [ 513.954216][T11931] binder: 11930:11931 ioctl 40046207 20000000 returned -16 02:01:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:50 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000040)={0x550, 0x384, 0x3c00, 0x2000, 0x8001, 0x7, 0xf, 0x2, {0x9, 0x9, 0x1}, {0x5, 0x8}, {0x3ff, 0x476}, {0x1ff, 0x2}, 0x1, 0x1, 0xee, 0x4, 0x1, 0x10001, 0x3, 0xecc, 0x3, 0xff, 0x1, 0xfffffffb, 0x3c, 0x100, 0x3, 0x5}) (async) r3 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:50 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:50 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:50 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x210400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x3c00, 0x640, 0x720, 0x384, 0x1, 0xf75, 0x0, 0x2, {0xcc3, 0xffffffff}, {0x10001, 0xd}, {0x7, 0x1}, {0x7, 0x18bae415, 0x1}, 0x1, 0x10, 0x3f, 0xe5, 0x0, 0x4, 0xfce0, 0xa170, 0x1, 0x5876, 0x9, 0x4, 0x8, 0x1, 0x0, 0x4}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 514.543457][T11937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:50 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x210400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x3c00, 0x640, 0x720, 0x384, 0x1, 0xf75, 0x0, 0x2, {0xcc3, 0xffffffff}, {0x10001, 0xd}, {0x7, 0x1}, {0x7, 0x18bae415, 0x1}, 0x1, 0x10, 0x3f, 0xe5, 0x0, 0x4, 0xfce0, 0xa170, 0x1, 0x5876, 0x9, 0x4, 0x8, 0x1, 0x0, 0x4}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000000)=0x8, 0x4) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:50 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x3}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) socket(0x27, 0xa, 0x2) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf5, r1, 0x1, 0x0, 0x6, @random="32e2f0945dba"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a}}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xed, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xd54, 0x9}}, './file0\x00'}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r1, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0001e12c0010002dbd59df44b2bcca7000fbdb", @ANYRES32=r1, @ANYBLOB="0f0009000a000c000700100008000b0001000000"], 0x2c}}, 0x20040010) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:50 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x210400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x3c00, 0x640, 0x720, 0x384, 0x1, 0xf75, 0x0, 0x2, {0xcc3, 0xffffffff}, {0x10001, 0xd}, {0x7, 0x1}, {0x7, 0x18bae415, 0x1}, 0x1, 0x10, 0x3f, 0xe5, 0x0, 0x4, 0xfce0, 0xa170, 0x1, 0x5876, 0x9, 0x4, 0x8, 0x1, 0x0, 0x4}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 514.889518][T11968] binder: 11967:11968 ioctl 40086602 20000000 returned -22 02:01:51 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) 02:01:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x3}, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) socket(0x27, 0xa, 0x2) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf5, r1, 0x1, 0x0, 0x6, @random="32e2f0945dba"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a}}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xed, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xd54, 0x9}}, './file0\x00'}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r1, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0001e12c0010002dbd59df44b2bcca7000fbdb", @ANYRES32=r1, @ANYBLOB="0f0009000a000c000700100008000b0001000000"], 0x2c}}, 0x20040010) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x3}, 0x4) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) (async) socket(0x27, 0xa, 0x2) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf5, r1, 0x1, 0x0, 0x6, @random="32e2f0945dba"}, 0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a}}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xed, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xd54, 0x9}}, './file0\x00'}) (async) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r1, 0x1, 0x6, @multicast}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0001e12c0010002dbd59df44b2bcca7000fbdb", @ANYRES32=r1, @ANYBLOB="0f0009000a000c000700100008000b0001000000"], 0x2c}}, 0x20040010) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) (async) 02:01:51 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000100)={0xff, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x8, 0x8], &(0x7f0000000080)=[0x20, 0x6], &(0x7f00000000c0)=[0x200, 0x8000, 0x2, 0x9, 0x6, 0xfc, 0x81]}) r2 = dup(r0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r4 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000280)={0x328a038434f20308, 0x2000, 0xc80, 0x1240, 0x1, 0x6, 0x8, 0x0, {0x100, 0x9, 0x1}, {0x20, 0xd03f}, {0x200, 0xffff03e5}, {0xaa7e, 0x0, 0x1}, 0x0, 0x10, 0x8, 0x1, 0x0, 0x400, 0x9, 0x7, 0x8, 0x10000, 0x5, 0xb5, 0x38, 0x200, 0x3, 0xb}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000000140)="e30023222487de891529d92d9529547efe2c09aaad33dbec3727840d1121b79ea6c80a5463485131dad7c618acdd24713010f015f0cd849391d18c33915d8d76df3d2838adec12ec680088c805cfc8b344a95a2c59405702830bea9ff8d0dfe4b23337fd8572a254919b5aeba4dc100eeb350bff76", 0x75, 0x1ff, 0x0, 0x3}, 0xffffffffffffffff) 02:01:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:51 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000100)={0xff, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x8, 0x8], &(0x7f0000000080)=[0x20, 0x6], &(0x7f00000000c0)=[0x200, 0x8000, 0x2, 0x9, 0x6, 0xfc, 0x81]}) r2 = dup(r0) (async) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r4 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000280)={0x328a038434f20308, 0x2000, 0xc80, 0x1240, 0x1, 0x6, 0x8, 0x0, {0x100, 0x9, 0x1}, {0x20, 0xd03f}, {0x200, 0xffff03e5}, {0xaa7e, 0x0, 0x1}, 0x0, 0x10, 0x8, 0x1, 0x0, 0x400, 0x9, 0x7, 0x8, 0x10000, 0x5, 0xb5, 0x38, 0x200, 0x3, 0xb}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000000140)="e30023222487de891529d92d9529547efe2c09aaad33dbec3727840d1121b79ea6c80a5463485131dad7c618acdd24713010f015f0cd849391d18c33915d8d76df3d2838adec12ec680088c805cfc8b344a95a2c59405702830bea9ff8d0dfe4b23337fd8572a254919b5aeba4dc100eeb350bff76", 0x75, 0x1ff, 0x0, 0x3}, 0xffffffffffffffff) [ 515.430979][T11973] binder: BINDER_SET_CONTEXT_MGR already set [ 515.446394][T11973] binder: 11971:11973 ioctl 4018620d 20000080 returned -16 02:01:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x2, 0x3}, 0x4) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) socket(0x27, 0xa, 0x2) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf5, r1, 0x1, 0x0, 0x6, @random="32e2f0945dba"}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_virt_wifi\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a}}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xed, 0x4d}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0xd54, 0x9}}, './file0\x00'}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f00000003c0)={r1, 0x1, 0x6, @multicast}, 0x10) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0001e12c0010002dbd59df44b2bcca7000fbdb", @ANYRES32=r1, @ANYBLOB="0f0009000a000c000700100008000b0001000000"], 0x2c}}, 0x20040010) (rerun: 64) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) 02:01:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:51 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 515.475975][T11973] binder: 11971:11973 ioctl 400c620e 20000000 returned -22 02:01:51 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) (async) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000100)={0xff, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0x8, 0x8], &(0x7f0000000080)=[0x20, 0x6], &(0x7f00000000c0)=[0x200, 0x8000, 0x2, 0x9, 0x6, 0xfc, 0x81]}) (async) r2 = dup(r0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4) r4 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000280)={0x328a038434f20308, 0x2000, 0xc80, 0x1240, 0x1, 0x6, 0x8, 0x0, {0x100, 0x9, 0x1}, {0x20, 0xd03f}, {0x200, 0xffff03e5}, {0xaa7e, 0x0, 0x1}, 0x0, 0x10, 0x8, 0x1, 0x0, 0x400, 0x9, 0x7, 0x8, 0x10000, 0x5, 0xb5, 0x38, 0x200, 0x3, 0xb}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, r2, &(0x7f0000000140)="e30023222487de891529d92d9529547efe2c09aaad33dbec3727840d1121b79ea6c80a5463485131dad7c618acdd24713010f015f0cd849391d18c33915d8d76df3d2838adec12ec680088c805cfc8b344a95a2c59405702830bea9ff8d0dfe4b23337fd8572a254919b5aeba4dc100eeb350bff76", 0x75, 0x1ff, 0x0, 0x3}, 0xffffffffffffffff) 02:01:51 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xfc, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x10, 0x800, 0x4}}) sendto$packet(r0, &(0x7f00000001c0)="4d27b8a81d28692f688e7a4808f9c36892f2ffaa084f5796bc3a929cbd2b635bd4bb9165f8d8337f522417944b14402521abe81848817e4d1d3b3f2cf06f8fd9f85d507adff7d477f72687a44f", 0x4d, 0x10, &(0x7f0000000240)={0x11, 0xf6, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 515.637001][T11995] binder: BINDER_SET_CONTEXT_MGR already set [ 515.643678][T11995] binder: 11993:11995 ioctl 4018620d 20000000 returned -16 [ 515.831753][T12000] net_ratelimit: 41 callbacks suppressed [ 515.831777][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.843276][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.849022][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.854758][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.860529][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.866312][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.872078][T12000] protocol 894f is buggy, dev ip6gretap0 [ 515.877838][T12000] protocol 894f is buggy, dev ip6gretap0 02:01:52 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40186366, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e77", 0x5f, 0x4000002, 0x0, 0x0) [ 516.455270][T12004] binder: BINDER_SET_CONTEXT_MGR already set [ 516.503062][T12004] binder: 12003:12004 ioctl 4018620d 20000080 returned -16 02:01:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xfc, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x10, 0x800, 0x4}}) sendto$packet(r0, &(0x7f00000001c0)="4d27b8a81d28692f688e7a4808f9c36892f2ffaa084f5796bc3a929cbd2b635bd4bb9165f8d8337f522417944b14402521abe81848817e4d1d3b3f2cf06f8fd9f85d507adff7d477f72687a44f", 0x4d, 0x10, &(0x7f0000000240)={0x11, 0xf6, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 516.546905][T12004] binder: 12003:12004 ioctl 40186366 20000000 returned -22 02:01:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 516.763476][T12022] binder: 12020:12022 ioctl 401c5820 20000000 returned -22 02:01:52 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) ioctl(r2, 0x1c000, &(0x7f0000000580)="75ea602bc28eec2e2511a425bfb9719b7c99d4698ab53ba10e72cbe3ebbb0d307489dc5bd11cdc0b7e9aadd6e574100dfb0e6f67f43b018c12f7ed2518e4cbe9c6eb0585a677afe660673eb22b75a8693b2166b167b8160f6f3800336bc400a0aa2b9abf2b1abf73a01a21aa978aaafdeaa1ca233f9d2aaeb6cf1cdf917befda375559ac93904c0debff33b2c120f851e7de0104ad3d64cb8fa2604f5ee898cf462f8d3a8eaa99e399d34908eaede25e601b9a33a0a9ae2c40f896791274b9e65dddec3882e01ead149bf919d5b9d4d86b37247169b6c2f14a80e04de467b64c8a2cfc631819805880873a312c0afe823a2710f1ba06ebaeec087d84cd7d823dd0233156d157802bd399a4ed10d473b537fc4ed8f3ae278d530509523e8279c92234314e23f93d8279ef9bb3742e4dfb22f1072bce781795a4f95044f3ca91436497956fd0f0b30e76f60d9b3ce4faa0fc300f42d431e750ba51c3ff9c2bfba46b88630f58fbd2707bf8e5977066e084699e2ebc7c096c247c2bcd94ff30b50a87883c064dbc6d3cdb51381077bad0c94991e5138f245652845b9475e4aa5032937e5474555f1e65dc92ea1877d6391a0c4b5f9105b064998a38968bad0ee16753c546f3178cac7901d3be4c9a398c51566eae9d35bebbc0977fafa0d6ee5ba4d80b8c060b217fe11902bd018e899b68f501a8c76480f4ee734a71941ecb504c298ff31f97d504b230fa244d94708d9d3284c23c94721a53a3a6b78dbc821b432d156f1386df4187417b73019497ee316a7377dcc89c061d18d2b0aa859dbaaaf6be8d6ea4d913903616e7ea89aa232e7c44186266d958dcd421f77c85b975708a5d5cd2d0c0600d625f7683b90dc7783d3ff2edc4939ce0e246dcd0527e97540d45fa00d95815ebbf2902b3090f3eb118f7ef31414f487f34c97751f443a397b54e178c8a3f0ab7bac30dc0eb8d138c54fa2fbb2d6b6e8e9dddc555dd7777e345a70b8bacc42305b3abe22e15580ccb091de88590423b63491eb250c78913c4a7af1b422d82cba7bfcb3270c1cf404382da0f394370ed0e8479511ce92758e297833c3772fe648dc1bd525b81002ab167c3c394c9460145aac77436c14d57eb7a1ebd451db2202fee9dbf8d47915b877b5186d9c949d18b0721c858684be4795e66d78ff649f587a45204dcb5831ff5d206af47758f87ff99b39ab5670ce7f351ad9aeabae7042c76790e0750f86ead6dd9364f81f84db4136bb2b40632d7e9ad6e8e16e6011615cf7df950ffa079ba451470c978f0edb9e4106ef57d9a52a248ad66c022f55dbe754164b336efe4a0c8c591ebbe728fc5087dc2a9ebe7317f14b80988b6ffdbe987837436bcbdfbe0827463879419e99f308140e15fcb63935346243641fe7e17b4822e2a0a98525d558dc3aa6683d44f025340171a1202d3c2d74e659862d5caa06e92c8f32342652df71541e7d697eec55848006a62687d77adb7db2075bf031869130f6f4e9fae5929bbf203d872b7ae9d3e967ba2363392085892fb492aea8ec52357e204b4da7b062d3b10ea3769d115e722a806d04985c626461d7941b8fabd002f26f5a9197814e92e5cd43ba8d22d06cb896c3c9cc2dcecbd2fc27f8f2f876d474cf463415c244b57b3ed1f2fe77f287fedb94b7078d38315a28b8023cfccfaf79fa0c9cee66110cd997ad132e06cbde96cab606efe249761ac1f80f2247e007cb7b25f6ebf07a5ce1c52e0be306353c7b4531109267c743cdfaa04a9c9323449f09d7c7b8b437766858a7db2e02cd3236eae3007ac6d194dea713a8e130f132ca42e9e57cef2927bd007f173a765c36f406b06870c3882c1060bdb4a9aa7865d58762d719b6033481d5cd80921cbb9db988312465e746be975ce7f3283e00eff65bbe6b90da2419b02e857af63dfe20d7f3ae64b5db73e9f397577f92624716823d2b7380d485aef8d1ebfec806ff3c17c7de12438355907e17d03294592bb4d5de4f3b8ee49b6b606004d87b1f8dfd692306ec1a834b442a0a974c381ec5cdd030dae1d77271bf8a42a8b19d66a81620487941a7b804bcab59da647abee740ee2db58cd483473185af9d3945ed73307ae8e9c0cdd4d1d8cd03268b03b2ab453682e0d571e9745ed2dcd63e9b93728b1e4433fc529f203995be349f3f444df0913524ff8cc3d58d8c07936420cd5b9ff13d5adb30fd87a497bacf178f61c9b7f2c3c4b89fc70bf17daefab0bcbdb89e528bc0a81b8bf9774469c738d8b4ff6c474eae168d3211fd16c4a1e8185c4f72912678fa8905c07dafed8b2f81ef6a8d530c1a0144373f92676d1643d526e25dccb8b502fe5c4237a654d21d755947e63101b2b3b4df4285cdf5335b1c7832836f0941886c046dbb1ff31eadb4dd44fc1da460ae9c8d56fc52cd81246d9690e05e4d35633e39d6e3872e6e285d6d699a757aea10c2f65aea89ef0467975b1bafd7a1f771baa35f1a2dbd988031bcb1e80fc12d0f83129a5d079ef61503064a9a20cb39e862ba1ace879adf133b5b32fc852ad11252639bf9d142d152960b12d4cb573c14d1c649f04f7416c5bc10d5270b273446cbab5a6979c5b6a21dc4ae350d33e45720570ad9fc1df99753eff257983a53795c430261cfec44f53b95f736473a4f28dd5ed6f0a42a7d9319199f09b57b0bf5d9b23d8d8e1ef4b595ee165e9403748ad4cc535ff31511bffe5d9cc7e52f8fdeb8f190c41d73e5643a30f6f16e7226289afb8dd9d2b5e85b892d5838df2d64d252901e1de9957e04ebb2fe1cffcc19268a00675a93aa4d1386a4ad132d89c0b647c3d8dfc5731d362f4ca98162539d2d941886c9025a21a8b0b30ff17e26ed7656560ebf8a2296139fbfba1b1b16ad3782de56b4579eeb2e33c8c42adafbbd115ae469a511204c7c79d3615344fe6c88da57104753bbb74c117d4bf10270e4009828f7cf9fecad5ca32f51400ff4e8021bad84177c9050ba64b909d4b7ee19663094b5eda6c25c852ac67b109bcc26a6187c8ca810048b74397996886b6c29dbfca2ec52f8379eae5074a9904700564ce36156d5384d2684276fa6191258cc0441e0cdd10efdc5de7da6ebff53a5d7ab5ab268d52dd4acce19399d3e401c98a35abcf8a4ae84ae00b7c89ff95f5817fde8231dcdfb64c50fe44640512909dd5d5dc992ceb7b9ee224a78f279cbd28cbf128a0b8f249790929f6722ea832517420ce6ae54ce35b54e10f3367efabfaf498ab4112eb298d05ae0e4bbd7cf8bb539b4d9daa981d8c348c4c4b92268006efb4b31d7f0d38f4899e9e37de6de2f1f2f7f2541aa3658134ea72d1d2392f9f29ea3f743258d287cdf09551751012cf47b14a5fa8bb662b553b0af533aaff1c67c105b634d7885d587d06dc2f03b7cee7909b4765deae157118f4c5e61ef97710b9236933bc70efd4abf259bb4b77b4721e83ddad0aafeef4448c594a35d06bffc5b5cbab9fef88519ce600e8429a71f23fe6d1438c162c9e854006fd4789f35660221ad9cdf1c17b72a56c255646b4df1a025a0abdcf02a6afe0a94d4649d84a229b11995e3d969dc7fd730d7995bb135b0a35e190309fbcad38668816cb94db23d9ab0711ab6913e6b792c159c6f9201e998d1fac430adcc0ddf01ab93e8a24f4a2c347e53ceec49ed71e7d6ac28c6a6cf24019d63f0b577e69374d03a6b5cb34805fe44045800c401b72e9b4a807048f4b2b6cd58134c1c9ec3602277ae6477496b6a422a9190f91c84ca2e266d0321508a00846dc5025f6b41c107ee97f5b8d029fbca19a23d689edb4d50e2c3a819249a063318646ba07a1075abb99f7d62cf6c554760fbb953fd52aa5c81666ce091114a618c4b7dbfe039709a50404d37a07b05243d4ce6f351fa98db40926b2218ee84a5d46dba783bd3e71965caa83163070ad8e9037441ca9423b73d2091d682e7821883a9a7e7836bc6947d60f71bf829888bedafc814f460c4b8adf55ca86f363f5f05b8b758f70b628b7db45d7a24f766cd6f894082125e202aa571460008ecfafc2841f136c2efebb3b938d7e930cab33625049344ef198df7f551ad5999e65abc89b9a621c74826295ae9d9fb0d05d17956286e2cf14a9b3fae2ce829511414ec2aedda55cdc5b7223e95585e63287ad403b66efc42d928af370dc764ee11d422222cf0e495abfee05ad5625c0077bf835b854364f5817176c8be0a8218c9f80baa264f79f3508d4a5e57d27d4bf45eb2f761d35e1db329ac073eb956fc26d8e015945e664fb05c7872c19e0d68bc1a4bb4d1b879adc798ae84bcec806f3dd7a5d7d847bd176f4770bded1cfd334da1810108c3664781efe03b9c94e5790c6259eea7982c2564353d47d36b5eda0cd31e6b1d7fd1bfc950d6e6bbb60dafc59333cd89e43e9ca73284b83a136fb12272dec5822e610e03b7851f6a7e989c8ed3b64010cf66db57aaeaa14303eae45a6775632ae8119ae35dc288ecebb393def095a9f3e47c0bf2f63f18507c3245958268bb1737c7d7a59c534b054c177274b5dec4b93e458fb7b9631a83b10f7adc65d88a22f0f29bc4473960cb2e570ec73507a69791d23865b3e9252d3553fd831c129d4b1f6bfebd7eb3a7518932f74c88cc87f9c13e9feecb18440ce78980f7f0e292530ced319d114f4c1adac2a76eef32b01072228a1363423e021fbbfcc4754891812c451fc1cbd8e71addbe1e7daf3dcc8eb8b39fc82c303088d445607e30af96d5aafa26ce3f85dfb305744d5eb2a77c2595abb596d2c6a18efd1914aaae8c4731dbbed2c06e6fb55a109657433b06886d79a1dcc49834f6067666b2250ac1661835c3c7900048d00deb632123b96d2e2a83ef1d0d6ecb76e66710bafaac502efa85f6da2c1daba05e50851f3081aaaaac4dfaa7b369458c22ee8cd235aaead3580e2d5f0dbfbeb4c7ed4af5d598ff822044b83ab1ed92133ab62b5ce0309b3004c4932cc39562160d469668026f370077a0dd21a5efbd590faffc6b62108c82e6e60417b88df2160b71d5ab552a231f8337a299307d6c14ae66eb4a56f24ac8038577b40b9a3bf048943885e4c02f6ee0fb2f95ad0c1a30c98819a27d30969f9fdcd676b974337ee9efc07c496e4633f54bfaaa8336a2477db06e3057aa6789249f33634e4567738e1f6c46ec4086649efef31e1a412c5cd25753e408c44c0f5bc3b133bcb4c3c19afbff63147ef978fe445b280cdd581c4b6cb57ff432248a9e0c33a87de455872cf406e65e3e69ea132922ae0cb0d5d5c3ce01a7921f473cc91d4c0e6f3878bffabb8b1bb5ebeb0ba2ced974f9f860f1b8b2d1a56d4b0c1a7a31efab8874667f0efe5a0a5d75da8f2480c0862302bdb2923f9c2bfa7b1a5e383f7882ce093ab2a51722611140e545c13c75cbd12ba885c71aeca2112da4560075c366e069ee3742f575a27f6e98e269e5bddd67e4bf6935ac81bba2075d6a8e4ce9ed1460b36bb9fc8f562b49b88060de6cc531c1c830567360b87d3bf0a940e28d87bbc272bd224057dd1f9a5a880b571956d6808369934a0c20bc34e20790d41eb4d9e328372a8065c1833690dac81f63895ffcf55ca5d06c7da3b415df13f86b196782ad0b21bfaa1422abbe4a2039b1da8b3485d4743608b194da75abc5c1fbe31c7c763ff66a1554e29897b4a67aea1096942e8f36517da026775203316686698542d86eed2bd3f55eda6926ae595efd1a53eb5ce61fa944a6ada4c5152b5afca3cea30c13175edcbd9515c69c32e72bec13955d9121f95") r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x422900, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r1, 0x6722a000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 516.911993][T12025] __nla_validate_parse: 9 callbacks suppressed [ 516.912017][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.058052][T12028] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 02:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r10, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r10, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r11}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:53 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086301, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) (async, rerun: 64) r2 = socket$pptp(0x18, 0x1, 0x2) (rerun: 64) bind$pptp(r2, 0x0, 0x0) ioctl(r2, 0x1c000, &(0x7f0000000580)="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") (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x422900, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r1, 0x6722a000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:53 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x5, 0xfc, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x8000, 0x10, 0x800, 0x4}}) sendto$packet(r0, &(0x7f00000001c0)="4d27b8a81d28692f688e7a4808f9c36892f2ffaa084f5796bc3a929cbd2b635bd4bb9165f8d8337f522417944b14402521abe81848817e4d1d3b3f2cf06f8fd9f85d507adff7d477f72687a44f", 0x4d, 0x10, &(0x7f0000000240)={0x11, 0xf6, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x20000000) (async) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 517.496047][T12037] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.520171][T12038] binder: BINDER_SET_CONTEXT_MGR already set [ 517.526203][T12038] binder: 12036:12038 ioctl 4018620d 20000080 returned -16 02:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 517.538762][T12037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.558027][T12038] binder: 12036:12038 ioctl 80086301 20000000 returned -22 02:01:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, 0x0, 0x0) (async) ioctl(r2, 0x1c000, &(0x7f0000000580)="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") (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x422900, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x1000)=nil, 0x930, 0x2000002, 0x13, r3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r1, 0x6722a000) (async, rerun: 64) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (rerun: 64) [ 517.749480][T12049] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.777749][T12053] binder: 12050:12053 ioctl 80086601 20000000 returned -22 02:01:53 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x220200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x801c581f, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 517.893536][T12051] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) [ 518.087975][T12061] binder: 12059:12061 ioctl 801c581f 20000000 returned -22 02:01:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:54 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) [ 518.374857][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:54 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:54 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x220200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) (async, rerun: 32) r1 = dup(r0) (rerun: 32) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x5, 0x6, 0x5, 0x29, 0x9, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xffffffffffffff6d, 0x4000002, 0x0, 0x2ff) [ 518.481013][T12064] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r11, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r11, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r12}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:54 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x220200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x220200, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) dup(r0) (async) mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) (async) 02:01:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x5, 0x6, 0x5, 0x29, 0x9, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xffffffffffffff6d, 0x4000002, 0x0, 0x2ff) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x5, 0x6, 0x5, 0x29, 0x9, 0x3}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xffffffffffffff6d, 0x4000002, 0x0, 0x2ff) (async) 02:01:54 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8, 0x8000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:54 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x0, 0x5, 0x6, 0x5, 0x29, 0x9, 0x3}, 0x1c) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) (async) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0xffffffffffffff6d, 0x4000002, 0x0, 0x2ff) 02:01:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 518.690742][T12087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 518.722646][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 02:01:55 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000", 0x69, 0x4000002, 0x0, 0x0) 02:01:55 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x20002, 0x0) r1 = dup(r0) r2 = mmap$KVM_VCPU(&(0x7f0000ffe000/0x1000)=nil, 0x930, 0x2000002, 0x13, r1, 0x0) (async, rerun: 32) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8, 0x8000) (rerun: 32) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000500)="add974eba3eb5c133c85c54adfba6f8e2ef5c40df31940916a0f38c825b81b29d9ddbc5b7ca9272cdfdec89e5edab2ee836a3835fa3a2fdf8fa23a890c3c05b61de5f825f91b897a", 0x0, 0x48) 02:01:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837d", 0x66, 0x4000002, 0x0, 0x0) 02:01:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc00c620f, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:55 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r1, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r11, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001fc0)={@local, 0x0}, &(0x7f0000002000)=0x14) sendmmsg$inet(r0, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="644cb4ac2b722a32a628400f350cbb219b4641db8788cb8193b513c2a788fb918bf9338f8fd0976ff53ccc88a17f809693d953013696b280b32b761be4a4449ea74b72428d3a4767f47a6634cee8006d320594d76b80e343053bf967c9b204d89f27dd10e1afab3f5a2aad761b51b610187e06275c3c717b16aede898d53e709409aa98e21b0fb92f96ce6b6c0ac99d25bfabb012eb51d80b48768efc1b9c968d49794dd50856ac2dae38ea4374e5f3ff786f993ddacdbabd3e7b0da56f57c4e627afe421bf1e9b8483cb017aa45d3292bbbb8ef93ce9622f315f789131b549c718232028c03ef2b4d99ae38bd15bb63a8fc161accc3a52202", 0xf9}, {&(0x7f00000002c0)="4a3edf06cd2f28155c91a7d506009778bdcf31fa60d151496984d0aec8f7f5ca76af463fdcbb9a8b207a5b7985b3372c753ee99fc63b204fc37beaa0a4c3e605c3c611f876ffcb6d37d5786e8901799dd38dc16d08d7b401bdd643412b5c0d583479f050c4c9c2ce69073e0ea6600fb4f82eaadc0b1f7a012776fbc0807f4c585e34", 0x82}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0x62, [@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @broadcast]}, @cipso={0x86, 0x66, 0x0, [{0x3, 0x4, "2de7"}, {0x6, 0x2}, {0x1, 0x5, "afe0fe"}, {0x6, 0xb, "f795f3c3dd4518789e"}, {0x2, 0x7, "66fd99c393"}, {0x5, 0xe, "a5a99b70f39f3e31207c2821"}, {0x6, 0xb, "9d46821c8260b7d9b9"}, {0x0, 0xa, "707b5b547efdf043"}, {0x2, 0xe, "497c83a5c73956362e041995"}, {0x1, 0x12, "0c4aa31dada8e0616bccae5a926f9fa4"}]}, @rr={0x7, 0xf, 0x87, [@local, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x138}}, {{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)="a097f875296c7f70d87ce9bbec7bb155723d610816bd1de634eb66339a50563a1c24f082f5da15fc2b077d08b283e076700a3270ecd8845651e242331278d8cbcc5e72b414380420c041ee9bc9a161c877afa28160e8d3da25ddd4ce303595f6b29779b76c9d19750abb7b431a9868a6e332968ceae7fb02bedad4a76945790163c9713b0eefd647a9e114fcedda29405b30ff4abc67c63eb980d45285b957d695db58337d16359bfb5d5c535ab70bf9149dfa51d9b670cf3ec0ce98b14191d4b8d1114cfb52d7b1bfff77a5ac363c22b6515de611907405572fed282fc892d7", 0xe0}, {&(0x7f0000000100)="627df1364dcff7", 0x7}], 0x2, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x108, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xec, [@rand_addr=0x64010102, @remote, @multicast2, @multicast1, @local, @remote, @broadcast, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x3, [{@local}]}, @timestamp_addr={0x44, 0x34, 0xbd, 0x1, 0x0, [{@remote, 0x3}, {@broadcast, 0x401}, {@private=0xa010102, 0x81}, {@multicast1, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}]}, @generic={0x83, 0x5, "6c83b4"}, @timestamp_prespec={0x44, 0x54, 0xd7, 0x3, 0xc, [{@empty, 0x3a5}, {@empty, 0x80}, {@local, 0x6}, {@private=0xa010100, 0xe1}, {@loopback, 0x7b8c892c}, {@broadcast}, {@broadcast, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xb715}, {@empty, 0x3ff}, {@remote, 0x200}]}, @rr={0x7, 0x13, 0xb1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0x93, 0x1, 0x9, [{@empty, 0x7ff}]}, @end, @ssrr={0x89, 0x17, 0x7c, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @empty}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x20, 0x0, 0x0, [0x264b, 0x8d, 0x0]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x6d, [@multicast2, @remote]}, @generic={0x83, 0xc, "d818ba8097555359f64c"}, @generic={0x7, 0xc, "e87bddf1c62226da7474"}, @timestamp_prespec={0x44, 0x3c, 0x8, 0x3, 0x1, [{@multicast1, 0x40fe}, {@multicast2, 0x7fff}, {@broadcast, 0x401}, {@multicast2, 0x98}, {@local}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2}, {@loopback, 0xce}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}}}], 0x218}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="32d409e758d6a67c13a7017c03a72798e8806d17ed363b527c", 0x19}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f0000001880)="51714f93251b8100facde908f038fc3c184757c26011a29238418d3e0a8206847f87568a07f8a751c8ec74acaa94e2dd41c3b9dc799b069e4993f32d9c6f29c217c4ec724d5e3eddcaf070eee895ff7fa267410d0d7477", 0x57}], 0x4, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xdf, 0x0, 0xd, [0x0, 0x800, 0xb8, 0x49, 0xffffffff]}, @timestamp={0x44, 0x20, 0xe9, 0x0, 0x5, [0x3f, 0x3, 0x9, 0x2, 0xfff, 0x80000001, 0x9b2]}, @timestamp_addr={0x44, 0x3c, 0x40, 0x1, 0x7, [{@loopback, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@private=0xa010100}, {@loopback, 0x80000001}, {@empty, 0x3}, {@loopback, 0x1}, {@empty, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x25, 0x3, 0x5, [{@rand_addr=0x64010101, 0x3}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@empty, 0x7}, {@multicast1, 0x800}, {@rand_addr=0x64010100, 0x1894}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@empty, 0x5fdd}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0x20, [@remote, @private=0xa010101]}, @cipso={0x86, 0x2b, 0x1, [{0x2, 0x12, "5057f8eff63e17c1e9fa5920d483db60"}, {0x5, 0x4, "885a"}, {0x0, 0x4, "fef7"}, {0x7, 0xb, "dead41b608b2b8f9d6"}]}, @lsrr={0x83, 0x27, 0xf4, [@local, @local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @multicast1, @multicast1]}, @timestamp={0x44, 0xc, 0xfa, 0x0, 0x7, [0x3fe0, 0x800]}, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x2, [{@empty, 0xa7}, {@remote, 0x80000000}, {@multicast1, 0xf7a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x7fff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x1f0}}, {{&(0x7f0000001b40)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001b80)="57f626afa2b30747bf8eab79e1e94974832fef997597f4c89a85de56ba2af8df320f74ef277763a380a6f36edfca3ce1805d91f8f2c0d8b33e9d8f6df29d5abd6503dd773585d443c2c2cb90c0a7a30934d2b91bad36f478085a8fdbec31f207d0b9480fdb3134bc384dacd88e4244ffb79587a9b68d472089246aee652305c38861478cd9b052795c35f55e781b621b0288a2f00c5883f1c9ec86a90e8c1f23aa09b5855baef235a1c9218f5d250aafe206d6524f602ed7aafe0fb0fb1ee6b83fc03a0f1d2aceb61a03d3712669af18eb68ca7be6fb6b0fbe3a3490d6dbd3efa9c2b20fb042a1da51", 0xe9}, {&(0x7f0000001c80)="9a95ff395fc644d65f34cb11d5996f68306c87f0e49c8d403b7cf319797dc121c91f641c256a2ca48afc157224d7d3649c297efe4f733584e86c8f77c460afb782be81714a1a9e74ab91da5872e57d2798a0cd10919f2668e3052eff53d3a557dee12767da246d954264fd0b2ddb921246fce845b9c3c54a8bf64a23cb571c128202768dcf154cde943eee21d32d916f76262fae6313181ec05207f83da9b8c96b589998b21602cde17a0bd337de81255fc8735b0bf9c6b9b2f652dd129e6f62097ba69fefca2d", 0xc7}, {&(0x7f0000001d80)="0f7b90dc1b1401f53818add95d96e62c1f166288ab516604d09eb115fe82e492a77c08a8d5be11a5cf596fa6ecb3ab8932667b40cb4bfaec77a8b6fdafb29d1e460e79b02e328c6b97fb300ad2fb8db1ca5fdae9b9b601c49e5bfa1490afa4554a3992210ec6431f4702b8eab2f0c2cbe5e3b9f852f3dd4bb8d0317fc7b8a53fe23515246164", 0x86}, {&(0x7f0000001e40)="8fcf9f6f1b71c44feec3016ab607af555984c357770b25690d76858dc9a14eca7f5d01d40f494aabbc99d95574fb90706b75a85d3be17fbee4a9a9aed63d", 0x3e}, {&(0x7f0000001e80)="9c43057455f7e26fc8c79b703ab207af0cf40c0adf99064696cc16aa66c615fe9b908d3853b6bece95026f42cc03d1a72dc41473f0a76e5b37a1795c94fb82765938d90933a84247c83cb5a95646f4f0ad358313232d4da93bcc7711756cc85800f8a2d732360b03b1fe074dda73c1d2e11196f80b2e7bfb5202ead9d71a1021b26b820b618f53e7d89b408b58961a7902075d225bbb89755eea99b4d5e77cdd1c3423aed9720b65", 0xa8}], 0x5, &(0x7f0000002040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @multicast2}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x1, [{0x1, 0xb, "0392f4fe3ee28b37a7"}, {0x7, 0x9, "cf946c3df19d7a"}, {0x2, 0xb, "70f7834559613095bf"}, {0x0, 0x4, '0O'}, {0x7, 0x5, "c2984e"}]}, @lsrr={0x83, 0xb, 0x9e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0xb, 0x23, [@multicast1, @empty]}, @ssrr={0x89, 0xb, 0xb6, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x26}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x118}}, {{&(0x7f00000031c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000004580)=[{&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="e431a04c52d2503896182758bc06d343f2ceaf756adbe596f0daab7bed2f7b4a6d517e56946c91affc1d3f818d75b099eb07fcf1f9b53707a7eaecbd9fb86911896213386b7a2e138c8637c45e12d05cd3c0663906484d04f5f9330d086f4656a9f2642101ab2359d3c78bbbc58cc2e0a09ee7e1f2e97a64cb4fff655a6fc0f35ff3f9dbfa28ae7df90e27216d996f33af5a37", 0x93}, {&(0x7f00000042c0)="1de027d2c02bbc38492adcb7af9f21c5e439681ee3ee84df4d87a42827bed92f248cf407089818f69e4d2b04a75297d0b44f2469bd88a68ddc9637a30315d4f02717cc21fb3a0fba6bd5a5e67d2dd4654ed6c8b49e12eb92ebc4bbfe0a1db8758b72e81fb04228242ddd3be778937cca0dd90e0c1736b0ca70eefd74105205ffa9fd5dcc9e451166cfe1edbe10388b5e52a5c70ade34f05369051374f420a92e3ff88e5f8a388a3c8c", 0xa9}, {&(0x7f0000004380)="61abbd1cd36f488fe5b808e2f011e9d8b4c1988c525798863a0ca6e725a03b4b72ee44ed08970d11ca6bb5f0297d137bb5d75d3cf8b5efeaa96d6f1b0600bf57825ab69e64d69eecaadc02025183d8939c8deefe9d8a9c9ae8561c1b732ab0395131736246062718f31b90c2456fcf2c986a5414eaa6da74f272ceaf50e13fa93b25431ed894b86cde5b5979e5b98350599209639e6e25c071eea4226bbc282176db64b911a114a3d739664716ecaa909ccdd2bd14f1deab209e13724a87dfe80b", 0xc1}, {&(0x7f0000004480)="d602e2935409db8250c56df7bba62645861056a993d37c662e613bf5d72c869f609c658b", 0x24}, {&(0x7f00000044c0)="de2f15e91700b1468102222f069942903e39f5b7d8d57adc99e2b31ee3cc6ae776325b29e87583a43380336541c246978d75d4428a240694e9c5e86fbfdff7127a2a186febc0dcc92a84f971b98cb89b313a96ce91d14944efecf5d32f6c36e320b5f107bb487b10eea60cc18aa949956c14dae5ebcc07071d112a10d45e4669ed7846ea1673587ac1673c005b25fb8bd718", 0x92}], 0x6, &(0x7f0000004600)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x9e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @cipso={0x86, 0x2d, 0x0, [{0x5, 0xe, "de8713561a1660f9c9848299"}, {0x6, 0x4, "71f3"}, {0x6, 0x6, "7c10c29a"}, {0x5, 0xf, "a6e4fe59b0cb0aea2b6cff79cf"}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x83, 0x5, "13323a"}, @end, @end, @timestamp={0x44, 0x1c, 0x46, 0x0, 0x7, [0x80, 0x1, 0x0, 0x80000001, 0x0, 0xffffcdbb]}]}}}], 0x88}}, {{&(0x7f00000046c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004700)="7d777210077c734953dc29053ee623b40d04f05ee25c17d780234c3a1bcf4c034fed7d0b05374e0bc2b27b7783e77a545d67f7726ffbaeb369670698e35dee9c", 0x40}, {&(0x7f0000004740)="2c857dfdb39aad64935974aab14be0052e8e8eb4915c04b8468358744dcbc7dbebb5552b69170babd60e2d5da916d3a0d405914f48028242cc739420908d94d43c1c9c45d84a0a1a5258427c3164a3fefafa3d065468916c2ccb89c05167f05f55b71f411f3cc484d37c5dd1f103356853ce413998eb2cea03d6ee6837e94684e6e53353cc23a752b51549ba6beb01d65dcc1525877c1a6f642f4fcbd0949b2c00d6ea5d65973417922b863676f76c2cf61e", 0xb2}], 0x2}}, {{&(0x7f0000004840)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000005c80)=[{&(0x7f0000004880)="d4c26338d450f4d93f69b769207f63c966da4bae5d1396cf8ef7462fd8316acd3c3dfe539c927ebb45faef27e03d8e155a37055e21c84f", 0x37}, {&(0x7f00000048c0)="249629ed0c3a1817c2305eedda3fa259bf87d7a0424d5942e3699043f38058a7fd9f5239cde2ca7cca2ed983620d264b23bd3b61509ac204018d154cb6c08af7980b907e9330737f55ab3ad7294050f78230a45111376383525090ab0cec7341281dc8c00c2e9307891c77637c376ea682756dd6dafc413bcb3821bb34f9e3bfc26023193aa8867bd1200a22119d532ae0d0f877620a96adc5074dc988eab3e62c8580469ff2fe68c3a09f280ddc71c98db79555c6cf89a896f9119cea8def0db3ea84e48e85629174d9", 0xca}, {&(0x7f00000049c0)="7a475aa4d5af4fc07dcc7f3c766a0fb14dd7a46ef674cb9d11809398ad7416d3948263f2ad74ad4800250715cc6c2067fabe3aeeb11d6e2df620250ad483165664c0140dc5121b3bbe46a75840a8d1fde1bc15a3126401a680337cf7f16e81a1d5dc707f7ec39f73e9b2177f1a1c568f67447557e66fb7d9d4823d585ef40cbf26bb38ab02729616768e621bfceeed03aebd4daa1cde08e56bab0e349e3195d99b7a27d2852280078f87085554e3534f318c9a109a8119ace92a9fe4e20cc18f398a3308c4e365e6ad3ca70c5fb5de5e2d3a98022ada12", 0xd7}, {&(0x7f0000004ac0)="13df2aab4cc48328ba3b9517ed726b7bbfba2b90fe7ec4fcb3e9ca7b1928432d5b999a2e79f0b9cf28a59e166ee76573cac95d1f0d7abdad9b26c77d0205d6c686ea2777406c7d63fc2cea11", 0x4c}, {&(0x7f0000004b40)="604b642c48a116a97edfc989e28c3f73865c7e0c38991785fea117ed414920f3610f8233ad848d353e827a0a0eb4520f80aadf2d909cab3c4a737ec392c8cb0d5b7f2a5404055030cd239f58af2d6cb027b16a1cac9a12d462339c3823fdcc330b889b7a26437965f1dfcfd4ef7ed02f8e51927ae9c82da6087dd582bd20563eae8f77c5e12516324378c725bef063d20b51372ed84560757db0574cfbd1b46eed2b2cf92fc3811931233e98437696592d92524737df1fae24bdc8a77cec4a2d3e9f646fd5b73837c450d80356", 0xcd}, {&(0x7f0000004c40)="7304db328e0d", 0x6}, {&(0x7f0000004c80)="7e2857a056166a7ef893ba556373d3799189c9b851166de145ebd48030aacee78e6b1e3edf0d9c838c8d37f1002b20649082ad31b1d62f3524eb0355557d88730c975fdfa95bc91b1d558fa823270793b18b9bd1cfcf8285d5e80bc785fed58fe358295ace311e8fbd204a3c42ea82e1b96af38f30d94ba1f32c9f6bd899d394bfd01405f72d92b73c7ed73d1395d00e50e4baa750f4ed58165c1f907da83a79fea5e2f02a3c17d6e7913a4be7aae9bcab903a8363a089baa580e64683faf2a2c3f68ac431da15e98b6b538567ada4ebd496c603d4a536ac468a2106eee93d52dc25b12f5aed24bb498f41343b8eddfccfd9a6af6258f53b723d9505af53b35f97d5fb835db2a30fc859bf85dd3ec2867b19aa704c3f400a63da9f7ce59dfd0781566d2f9efe5315eda5a1b2de5ee566eab94631089a5aaf62b63884b58453db9f25999ba41c51eef04f7c02d31a7a3b5cd6127808ec8925b5b7840998dcf62f3850a10ab835424d4f3308194242ac70b6aad52c5fa4f7a579e4988ba9bf4e7e0ea47cd7bffd3a9605207440818118b25e49b3a1456bb4ee3648b67054999471263d2604c74456fcdb490aa31eb2e6bcf308b396433abdc1b61421d6f624f55c3a6f22024f71fc08e5f985eb97b4c816421ba6b731e201c753a717ee973c0fd8870cbac4d008b1be47c0b0657f53db1d22b1142fff897c754ec3780a61e1975ad25197c605a10684b3381fba1be1972c26bd94ebe62fbef546f73104e553bb72ddc7147c24bb2c6b375c0a62feffce21451999e3c5f82ce66834dc80d28d83a22f9136337b35d8f913d28cf0bded48a3b4a37cbcb7aa9056ca22de8938c085f864b376688f736b82b8700de77c6c5687b90108f2212616883923b339c4112a3bdcd5e9b439fc288433b1d699b6ca24de01bbd52dadef335e820875cabe09f4244abd295cfd0e86d244c5f1da985b2c45fcc10ef6d34aca2ce5e7118fa2f442c9151d6382c761c97be2015163c17905aec72efe53dc9a12ef3484645d856a4887e656209de5c49a3d452be52b83684b5fbd42b30bb9bd60c71b66512e0dbaccd9c304a13f6c17606306880f60b44a9d42ea0cd5fb678f5cab05997ea2b50e835a22b081c5c5fc194961997c99b28a3f8f09a3cbe9225a6773f65862f84c3b51ab47f648f3d0e9b37575a968170eaf89527cd641988c71714b37a9d83b44704ce079af27d96f5bb958b089a7bcc7fa4601110e24c3a8cf7dce5d58ecf2857a74d7de2630a6f1743b032ddad69298a97714f52206f14f94ab8a3a6c358b1d09a5c3049a56794affde24aefe0b49e4384551fb5c36324986343b8ac9ce8ab68e8b64969eccc72b16981a5fed0054d24e64f874ea4ac226bf0743607a8cfb230ff814524305be5016311710a8c5e6df9d1da6d19af765089ab3d086fc9c39c417da719ce3467b4f0fb93b11250a70e0f477c0e2769ae47a2ad81778285f0684aaa7d8b20d0f246c649741a58a8415567d24c575c968b3a8c7c36df1798714d5c163c79cc3689bf1d319af33a6bee24c2759745c5c26487d4d5f0139eeb4caf8a5095ca3139c473993f624835663f31ddb9c739d0d9b0e092d50004fe18e8d0f826d24c9268a497ed53bb52b67bbebf1539bbaf1770af69e1e5aa338095ba81f1b4ba6a62b568226288dbf5dc75cf27965ad596780560e24da56a8468c8843096a31a90571c5c5a5b408ecab97b04bf70c1645669e91edee419ed23e1327c465fc8a40cd5d9f84bf4e433af4361342c547edf9cf2771b3ad8475b320857383f0d3c16764fbf6f5748f6cf79678d63495f15dd633abd91ac61a3b9f2223b5ac6422be8cde45f9624643a5bb18ca8c207f8a586e06b060ebbe7e53ccc60ae70a809f050b1c96664d7742040998d6a40b7d2020200950cf2158529b341585d5cc9d19011c78fd9b9360ddb1658a484e691496e8f469780f04d7953ffbbd02f91902a035bf231ed3600a2277b299cc7a40174f1277c89410aca4e648310e8e5f072743fee2b13a6bdbdf5294cf4da1206a58a96dc87ce8c4e3f39774c5683503a163c54527088e59c56ade330631ee484f3e506c43b72a356e9523836545988935c56be4f46b974583612a45ccac14a6bf6ddc117f63d44eee186ad97ea62ac2314c6a0bf29326a1bcb28ba823b22bcf57bc3525bcc49a2d3f7ba8cbf6c065028dc22156f375ff7304315e349b8c237787fac81b3277280820224d860535a4c5b030779eabb20c6eb002f09563758bf1c6a79d46d7a514fc6fe72a128b05341069235792bd0450cb1f30128eac591ff5b5c015d9e49313e215bd38f4298ee94ed313bc6e9a01789c7b686ed7e58642184f962666ab888bd27b27ce90692b21e150017b16af3a302f0280bd957cd8cc71ac2f80b75b3ed782e8283e54cdbe016b190f620511db192ffd76eabcf71bcc29207cff39e234a49c63f3bade83e7c07c58d2ac74356a4273b343d1d8afcc00837b896125d56b758de4a1bcce7dd508bdc5dab983b7aab9567516a6293746031d3b96f9c47272ea35c5970934eeaf3a6ed8c2edde2b2e8960d2f48495778e71b0fa9ad866bc9206ec6146cf3172afb4e7dd838509e98f16acc76e66877b3b49e78af71d716ed324bf1c3578a4b6e9e80ee19a6804aad29b0970ff5422a803dc68a55a802ec569dd6b92396bb1b1cf0fcc5ad87ea2b72a8c76285962f40cf41a0ace5e6b2b754b62645bfabc3b9def6d4c98ef9c328341efd94abd2cd7283fcf2c5f70229b1fff0a5188551bf1ab01ad980fc5319c3058da6ae2c5d9a4df150d6a80b0f8566e89eb1e0693b5e57afa14e52bc1b2bf5c010804a7866a6c784f620094a7e5233cc97aee179a8b03e63e2c08aabe8843d60fd7506d36358c1b1ef672166e4881ff9f6e9c490d8a6b926c49a48001dc20cd01ccaf9fa3ca0f65ddf78aad282f31965563f7f5f577e9db0f17a775657eccd254d78a4e8c8b9cde87557355b994046cbdde04c43248e52ea5fe7a33f5030f049574e072a8dd9b56e1b840cb17c025c84500db8519ca4ae30d06692bc7b074a3c5dce29cf16e073ed44796c622f4b119e032ac9876df6829b1b9ca3a45fc17de81ba13664b9020b028e134f4363574d7973d5fc175d0b7dd5c50384fb602e09f70cb29819ae3c84bcbf76359249f1530433bf0281bba0333c864e07e3d1f9358e7266687756b9a6bbc13647c52275e47e8d4842c7616d3989931b2020fbd945d6cf97d6ed42f07dbb3afd9382a76e382ae92bf79ac8b034a1d8a10827874595d18cf6c1333c982875e966921803abf55719e2fa25a824df72659505d599c649bd9c8173bc7ce27b6db939331d68b543848e1bb2b0b5a0972e6451a4e0e3d4cae2613531b6a5c7f2b31c239112dba7582eeca3a777bdccb4b914f9103b8f6eb5452a5d3cf09af41d855be0003042d6c07aab23e296c22e1b6f2bb241a4b2cdd41308cfa1bfefe5aa4739844c258b66bea0240d648deef46099937c2ce5d3be04673a1ae5e169779bbb9c5f692d0e4c84a7ddb5d62ed4b94985a97513cd7c75740bcba64498a10c7f74dd3323eea6894deba4b816143b1088ad909ac531884aaa037c21e42594e3e1367c6902325aadd9368be81d28ac6db09894bbe9e6ac7a63c5c19758552516a1957880bc07acfe2e34837d600c819437d9b43c12ad43f96c15e7646b50dc7fa9d5926eef7427cd92e15c8dfb1c6cab465e3e43d52b91a616310994ff26198762868585b8996903cec1dc35d61a5d6eeec75d6433aee4d87774e9e69de428a42a9431cfcb932ea8c40b84a9bc847f38a51f0fc346682d000c1de3401cab50800690b6611deaf50989a1f35512d64e42c00a2eecc3ac568bb005fe2b37e257a4627c2d903d98e830425474e27c828607b86c123f1bd4245878d2760774ed1f48a68dff15e743089e137736952da29f33a78b1180e783b01461698cdb2cdf16361316b0dfee2898c5c42de96849312112b9b63a0154726064a4d5f913f1bb55211a600eda5e33e80f7ea774d4191405584337d380648df0e27ca09afbe4c6b6385009000bf145232877f95e2a3bccbe05f93cf0c29fdb4d7da46279337b4e1cda66815bc1d68c89c9d0ff6cf12fb7e64e294b279dad4fef0ed55bb8ad6902a285d4d82def7c475aea3f9167d41c36090816803937a555696856608d08562976ea966e4842e0bf1d60948a29a5f0c25be7ae6ae26b4201bfbffbeae7350bc89e30f5ec3db00f9f43beaaacb995a2e5af1c5d87753dcbccf7ad756cb1a1e30786a39d044c226f5eaaf4c3140668ae470b2aa7c24040caaa00eca11c46d8551d98497ad10f5db662fa7ec48566f1691bc376dfa692edc5b1e69d3cfe48cf49a2b8bcce5615a32e62bee51c829bdf42c6749eb6c3d51297cab95c0b4a4db96cba1074dd206b077f0b074ede2158a1001fd74ee5e0a3c54d899fdd2be41b325fc0a0af4c659602f4fa8916a4204a965c17abcd62fb4d35b87306fd8fa296b55654ce97e3a1cbd3a55a3e1d3368c918a9faa6da5f9904409cb040c6f026f5c334e8b5a2ddb8ff18abcd22fc59b2ee8814c2c4cd48c4b22d6e725523919e1f28dc1a49be6e33e0ab04bb058e71c820bd4f69278d084340716ef477bb3384835789db89c9a08f4730c0ea65cba90a166e3652303bb2acd7928a8c5ea702b6641313fec701bb6e235e3bbfa39a8ea47159ae9350584399cdc2fa1cfeba84b2b09ee3b0b025f2fd46c086bde228f1a1e0b551dfaa6128d085217752bb37c7829a10bc521f1b2ca5e9bc65a068ccd331df7b6bfbfdb7ffeea1529b2f2f78a86b0c75701655ea55a6c081fdd65f540b055c547370d36a558666fa75555f3dfcad343c51a148c63d71d59b79907285a50476afd95bad11cfb7323051963caabdce54bddf6032f6d36fa50595bfd8b8b05e51218ff2feaeefde7b8ef3f94ac75ed2e659c6319d2b4e949688a9f83c36230e9f4ee0c26872f995c19deae3b9daea3a7589cff1fefc552632bcb8b9deb75c9b68af8d82d3a059e9c6ec963a52bc2c26027c97ad4cd6aa0aefb84197fcf3313c6c54d56fe6657cadd9755ffb7f9f8565d98d124cc456348159dd624dcb99573e58638482cd1dbd683b028d7e5b5785a343c3cce883477574f2f47022578e5bddeb3857c78cc6ed6cf6a456668d09e91a1a3488f43568990f4c67b585ade40e1f5c6581439d2590f8948633d4739c5243d496072c3d91b06b29956d244a6bb0887c7702c64fff8a02946d6622fc7dcfe2bdd369f9c07a323acea14b68e51adc067f54cda6af18e77734e29f259d04acdb90a0f230924b0485d160897d1ffee7a9693271620f00268bda4efbb0e5cbd8b9c3f593af5a4c24c57966f81900ed43b3532f8466cc4e956976df6cf970dede425ead984335b159490272b9c926ac6f1aae273f6c6a859b5c285e3a96cb9e915065387f2f2e44a96d48de206579f167a61328f639c9dc9974f2b8c1da090f2dda85d23f0e5c7d9cf4a8fbfce349f451ac118a25fd2445f44d078d80ded96a34bfe10f371ed9482510cb22540a010bae5a73c8c7d95c88f256c24674a4302296cebe301631798022d7b91b34160d653e33093675b18d6672459c90f8186c11fe4a9938d921e16ca573cefa1dceffcfafaf5e29df57a1c068e38d59c06ad18d75d88bff7b239104cfa80922c8ee799819f9300421c59af7c17b8046c5e8ab0c9c2be5bae3ba283c820c1753ef6e369ac04f699d4130c12a0356f5db0d34c3beab9", 0x1000}], 0x7, &(0x7f0000005d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0xd3, [@local]}, @generic={0x82, 0xd, "4d25676dcee9d209f460ad"}, @end, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x10}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, @local]}, @cipso={0x86, 0x22, 0x3, [{0x0, 0x6, "a6418a92"}, {0x5, 0x5, "114c66"}, {0x6, 0xd, "b1dd399867187e786058c2"}, {0x6, 0x4, "04d8"}]}, @lsrr={0x83, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x29}}], 0xe0}}], 0x7, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 519.380422][T12095] page:ffffea00007b2a40 refcount:2 mapcount:0 mapping:ffff88801bf34c98 index:0x0 pfn:0x1eca9 [ 519.391415][T12095] aops:fb_deferred_io_aops ino:276 dentry name:"fb0" [ 519.398912][T12095] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 519.433557][T12095] page_type: 0xffffffff() [ 519.454880][T12095] raw: 00fff18000000214 0000000000000000 dead000000000122 ffff88801bf34c98 [ 519.478095][T12095] raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000 [ 519.479386][T12106] binder: 12100:12106 ioctl c00c620f 20000000 returned -22 [ 519.487241][T12095] page dumped because: VM_BUG_ON_FOLIO(!folio_test_locked(folio)) [ 519.503038][T12095] page_owner tracks the page as allocated [ 519.509241][T12095] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 1, tgid 1 (swapper/0), ts 14812087312, free_ts 14453143043 [ 519.531734][T12095] post_alloc_hook+0x2cf/0x340 [ 519.536813][T12095] get_page_from_freelist+0x10a9/0x31e0 [ 519.543124][T12095] __alloc_pages+0x1d0/0x4a0 02:01:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc00c6211, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 519.553458][T12095] __alloc_pages_bulk+0x77a/0x1110 [ 519.560630][T12095] alloc_pages_bulk_array_mempolicy+0x32e/0x370 [ 519.567221][T12095] __vmalloc_node_range+0xd08/0x1540 [ 519.574880][T12095] vzalloc+0x6b/0x80 [ 519.579315][T12095] drm_fbdev_generic_helper_fb_probe+0x300/0x6d0 [ 519.585889][T12095] __drm_fb_helper_initial_config_and_unlock+0xc31/0x1600 [ 519.597165][T12095] drm_fb_helper_initial_config+0x44/0x60 [ 519.612995][T12095] drm_fbdev_generic_client_hotplug+0x1a7/0x270 [ 519.619847][T12095] drm_client_register+0x195/0x280 [ 519.621819][T12114] binder: BINDER_SET_CONTEXT_MGR already set [ 519.625181][T12095] drm_fbdev_generic_setup+0x11c/0x330 [ 519.631456][T12114] binder: 12111:12114 ioctl 4018620d 20000080 returned -16 [ 519.638056][T12095] vkms_init+0x625/0x760 [ 519.648428][T12095] do_one_initcall+0x117/0x630 [ 519.654819][T12095] kernel_init_freeable+0x5bd/0x8f0 02:01:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 519.671197][T12095] page last free stack trace: [ 519.676192][T12095] free_unref_page_prepare+0x476/0xa40 [ 519.683849][T12095] free_unref_page+0x33/0x3b0 [ 519.689704][T12095] vfree+0x181/0x7a0 [ 519.693829][T12095] delayed_vfree_work+0x56/0x70 [ 519.699574][T12095] process_one_work+0xaa2/0x16f0 [ 519.704741][T12095] worker_thread+0x687/0x1110 [ 519.710055][T12095] kthread+0x33a/0x430 [ 519.714302][T12095] ret_from_fork+0x45/0x80 02:01:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 519.727931][T12095] ret_from_fork_asm+0x11/0x20 [ 519.733484][T12095] ------------[ cut here ]------------ [ 519.739107][T12095] kernel BUG at mm/memory.c:2943! [ 519.744716][T12095] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 519.750831][T12095] CPU: 1 PID: 12095 Comm: syz-executor.2 Not tainted 6.5.0-syzkaller-08894-gb97d64c72259 #0 [ 519.760946][T12095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 519.771037][T12095] RIP: 0010:do_page_mkwrite+0x2d6/0x380 [ 519.776638][T12095] Code: 7c 24 18 00 74 5c e8 79 62 c0 ff 81 cd 00 02 00 00 e9 5f ff ff ff e8 69 62 c0 ff 48 c7 c6 e0 30 79 8a 4c 89 e7 e8 5a 5c fe ff <0f> 0b 4c 89 ef e8 00 0f 16 00 e9 55 fd ff ff 4c 89 ef e8 93 0f 16 [ 519.796283][T12095] RSP: 0018:ffffc90015f37cf8 EFLAGS: 00010293 [ 519.802389][T12095] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 519.810385][T12095] RDX: ffff888078768000 RSI: ffffffff81c6de36 RDI: 0000000000000000 [ 519.818374][T12095] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff1d5a78a [ 519.826359][T12095] R10: ffffffff8ead3c57 R11: 0000000000000000 R12: ffffea00007b2a40 [ 519.834346][T12095] R13: ffffc90015f37dc0 R14: 0000000000000a55 R15: 0000000000000000 [ 519.842334][T12095] FS: 00007faf348396c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 519.851290][T12095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.857909][T12095] CR2: 0000001b30826000 CR3: 0000000019f22000 CR4: 00000000003506e0 [ 519.865896][T12095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.873878][T12095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 519.881862][T12095] Call Trace: [ 519.885151][T12095] [ 519.888091][T12095] ? show_regs+0x8f/0xa0 [ 519.892361][T12095] ? die+0x36/0xa0 [ 519.896107][T12095] ? do_trap+0x22b/0x420 [ 519.900375][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.905342][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.910304][T12095] ? do_error_trap+0xf4/0x230 [ 519.915007][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.919983][T12095] ? handle_invalid_op+0x34/0x40 [ 519.924949][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.929920][T12095] ? exc_invalid_op+0x2d/0x40 [ 519.934638][T12095] ? asm_exc_invalid_op+0x1a/0x20 [ 519.939683][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.944654][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.949623][T12095] ? do_page_mkwrite+0x2d6/0x380 [ 519.954592][T12095] __handle_mm_fault+0x2442/0x40b0 [ 519.959729][T12095] ? vm_iomap_memory+0x170/0x170 [ 519.964686][T12095] ? find_vma+0x10e/0x1b0 [ 519.969030][T12095] ? can_vma_merge_before+0x3a0/0x3a0 [ 519.974434][T12095] handle_mm_fault+0x47a/0xa00 [ 519.979216][T12095] ? lock_mm_and_find_vma+0xa6/0x760 [ 519.984606][T12095] do_user_addr_fault+0x3ad/0xfe0 [ 519.989653][T12095] exc_page_fault+0x5c/0xd0 [ 519.994187][T12095] asm_exc_page_fault+0x26/0x30 [ 519.999076][T12095] RIP: 0033:0x7faf33a5dbad [ 520.003509][T12095] Code: 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 fe 7f 07 c5 fe 7f 4f 20 c5 fe 7f 54 17 e0 c5 fe 7f 5c 17 c0 e9 [ 520.023132][T12095] RSP: 002b:00007faf348390b8 EFLAGS: 00010283 [ 520.029213][T12095] RAX: 0000000020ffe020 RBX: 00007faf33b9bf80 RCX: 0000000000000048 [ 520.037195][T12095] RDX: 0000000000000048 RSI: 0000000020000500 RDI: 0000000020ffe020 [ 520.045180][T12095] RBP: 00007faf33ac847a R08: 0000000000000048 R09: 0000000000000000 [ 520.053164][T12095] R10: 0000000020ffe000 R11: 0000000020000500 R12: 0000000000000000 [ 520.061232][T12095] R13: 000000000000000b R14: 00007faf33b9bf80 R15: 00007faf33cbfa48 [ 520.069238][T12095] [ 520.072263][T12095] Modules linked in: [ 520.087949][T12121] binder: BINDER_SET_CONTEXT_MGR already set [ 520.096186][T12121] binder: 12120:12121 ioctl 4018620d 20000080 returned -16 [ 520.115294][T12121] binder: 12120:12121 ioctl c018620c 20000000 returned -22 [ 520.122066][T12095] ---[ end trace 0000000000000000 ]--- [ 520.132148][T12095] RIP: 0010:do_page_mkwrite+0x2d6/0x380 02:01:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000e80)={0x8, 0x0, &(0x7f0000000ec0)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r0, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000000)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="852a68770011000001"], &(0x7f0000000040)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 02:01:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r1, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r1, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r6, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r11, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x5c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001fc0)={@local}, &(0x7f0000002000)=0x14) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000001fc0)={@local, 0x0}, &(0x7f0000002000)=0x14) sendmmsg$inet(r0, &(0x7f0000005e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="644cb4ac2b722a32a628400f350cbb219b4641db8788cb8193b513c2a788fb918bf9338f8fd0976ff53ccc88a17f809693d953013696b280b32b761be4a4449ea74b72428d3a4767f47a6634cee8006d320594d76b80e343053bf967c9b204d89f27dd10e1afab3f5a2aad761b51b610187e06275c3c717b16aede898d53e709409aa98e21b0fb92f96ce6b6c0ac99d25bfabb012eb51d80b48768efc1b9c968d49794dd50856ac2dae38ea4374e5f3ff786f993ddacdbabd3e7b0da56f57c4e627afe421bf1e9b8483cb017aa45d3292bbbb8ef93ce9622f315f789131b549c718232028c03ef2b4d99ae38bd15bb63a8fc161accc3a52202", 0xf9}, {&(0x7f00000002c0)="4a3edf06cd2f28155c91a7d506009778bdcf31fa60d151496984d0aec8f7f5ca76af463fdcbb9a8b207a5b7985b3372c753ee99fc63b204fc37beaa0a4c3e605c3c611f876ffcb6d37d5786e8901799dd38dc16d08d7b401bdd643412b5c0d583479f050c4c9c2ce69073e0ea6600fb4f82eaadc0b1f7a012776fbc0807f4c585e34", 0x82}], 0x2, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @broadcast}}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x13, 0x62, [@dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100, @broadcast]}, @cipso={0x86, 0x66, 0x0, [{0x3, 0x4, "2de7"}, {0x6, 0x2}, {0x1, 0x5, "afe0fe"}, {0x6, 0xb, "f795f3c3dd4518789e"}, {0x2, 0x7, "66fd99c393"}, {0x5, 0xe, "a5a99b70f39f3e31207c2821"}, {0x6, 0xb, "9d46821c8260b7d9b9"}, {0x0, 0xa, "707b5b547efdf043"}, {0x2, 0xe, "497c83a5c73956362e041995"}, {0x1, 0x12, "0c4aa31dada8e0616bccae5a926f9fa4"}]}, @rr={0x7, 0xf, 0x87, [@local, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x138}}, {{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)="a097f875296c7f70d87ce9bbec7bb155723d610816bd1de634eb66339a50563a1c24f082f5da15fc2b077d08b283e076700a3270ecd8845651e242331278d8cbcc5e72b414380420c041ee9bc9a161c877afa28160e8d3da25ddd4ce303595f6b29779b76c9d19750abb7b431a9868a6e332968ceae7fb02bedad4a76945790163c9713b0eefd647a9e114fcedda29405b30ff4abc67c63eb980d45285b957d695db58337d16359bfb5d5c535ab70bf9149dfa51d9b670cf3ec0ce98b14191d4b8d1114cfb52d7b1bfff77a5ac363c22b6515de611907405572fed282fc892d7", 0xe0}, {&(0x7f0000000100)="627df1364dcff7", 0x7}], 0x2, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x108, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0xec, [@rand_addr=0x64010102, @remote, @multicast2, @multicast1, @local, @remote, @broadcast, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x3, [{@local}]}, @timestamp_addr={0x44, 0x34, 0xbd, 0x1, 0x0, [{@remote, 0x3}, {@broadcast, 0x401}, {@private=0xa010102, 0x81}, {@multicast1, 0x7}, {@multicast2, 0x3}, {@loopback, 0x5}]}, @generic={0x83, 0x5, "6c83b4"}, @timestamp_prespec={0x44, 0x54, 0xd7, 0x3, 0xc, [{@empty, 0x3a5}, {@empty, 0x80}, {@local, 0x6}, {@private=0xa010100, 0xe1}, {@loopback, 0x7b8c892c}, {@broadcast}, {@broadcast, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xb715}, {@empty, 0x3ff}, {@remote, 0x200}]}, @rr={0x7, 0x13, 0xb1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp_addr={0x44, 0xc, 0x93, 0x1, 0x9, [{@empty, 0x7ff}]}, @end, @ssrr={0x89, 0x17, 0x7c, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @empty}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x20, 0x0, 0x0, [0x264b, 0x8d, 0x0]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}, @ip_retopts={{0x70, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x6d, [@multicast2, @remote]}, @generic={0x83, 0xc, "d818ba8097555359f64c"}, @generic={0x7, 0xc, "e87bddf1c62226da7474"}, @timestamp_prespec={0x44, 0x3c, 0x8, 0x3, 0x1, [{@multicast1, 0x40fe}, {@multicast2, 0x7fff}, {@broadcast, 0x401}, {@multicast2, 0x98}, {@local}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x2}, {@loopback, 0xce}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1}}}], 0x218}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="32d409e758d6a67c13a7017c03a72798e8806d17ed363b527c", 0x19}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f0000001880)="51714f93251b8100facde908f038fc3c184757c26011a29238418d3e0a8206847f87568a07f8a751c8ec74acaa94e2dd41c3b9dc799b069e4993f32d9c6f29c217c4ec724d5e3eddcaf070eee895ff7fa267410d0d7477", 0x57}], 0x4, &(0x7f0000001940)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff9}}, @ip_retopts={{0xcc, 0x0, 0x7, {[@timestamp={0x44, 0x18, 0xdf, 0x0, 0xd, [0x0, 0x800, 0xb8, 0x49, 0xffffffff]}, @timestamp={0x44, 0x20, 0xe9, 0x0, 0x5, [0x3f, 0x3, 0x9, 0x2, 0xfff, 0x80000001, 0x9b2]}, @timestamp_addr={0x44, 0x3c, 0x40, 0x1, 0x7, [{@loopback, 0xfffffffb}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@private=0xa010100}, {@loopback, 0x80000001}, {@empty, 0x3}, {@loopback, 0x1}, {@empty, 0x5}]}, @noop, @timestamp_prespec={0x44, 0x44, 0x25, 0x3, 0x5, [{@rand_addr=0x64010101, 0x3}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x100}, {@empty, 0x7}, {@multicast1, 0x800}, {@rand_addr=0x64010100, 0x1894}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@empty, 0x5fdd}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_retopts={{0xa8, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0x20, [@remote, @private=0xa010101]}, @cipso={0x86, 0x2b, 0x1, [{0x2, 0x12, "5057f8eff63e17c1e9fa5920d483db60"}, {0x5, 0x4, "885a"}, {0x0, 0x4, "fef7"}, {0x7, 0xb, "dead41b608b2b8f9d6"}]}, @lsrr={0x83, 0x27, 0xf4, [@local, @local, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @broadcast, @multicast1, @multicast1]}, @timestamp={0x44, 0xc, 0xfa, 0x0, 0x7, [0x3fe0, 0x800]}, @timestamp_addr={0x44, 0x2c, 0xc9, 0x1, 0x2, [{@empty, 0xa7}, {@remote, 0x80000000}, {@multicast1, 0xf7a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x7fff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x1f0}}, {{&(0x7f0000001b40)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001b80)="57f626afa2b30747bf8eab79e1e94974832fef997597f4c89a85de56ba2af8df320f74ef277763a380a6f36edfca3ce1805d91f8f2c0d8b33e9d8f6df29d5abd6503dd773585d443c2c2cb90c0a7a30934d2b91bad36f478085a8fdbec31f207d0b9480fdb3134bc384dacd88e4244ffb79587a9b68d472089246aee652305c38861478cd9b052795c35f55e781b621b0288a2f00c5883f1c9ec86a90e8c1f23aa09b5855baef235a1c9218f5d250aafe206d6524f602ed7aafe0fb0fb1ee6b83fc03a0f1d2aceb61a03d3712669af18eb68ca7be6fb6b0fbe3a3490d6dbd3efa9c2b20fb042a1da51", 0xe9}, {&(0x7f0000001c80)="9a95ff395fc644d65f34cb11d5996f68306c87f0e49c8d403b7cf319797dc121c91f641c256a2ca48afc157224d7d3649c297efe4f733584e86c8f77c460afb782be81714a1a9e74ab91da5872e57d2798a0cd10919f2668e3052eff53d3a557dee12767da246d954264fd0b2ddb921246fce845b9c3c54a8bf64a23cb571c128202768dcf154cde943eee21d32d916f76262fae6313181ec05207f83da9b8c96b589998b21602cde17a0bd337de81255fc8735b0bf9c6b9b2f652dd129e6f62097ba69fefca2d", 0xc7}, {&(0x7f0000001d80)="0f7b90dc1b1401f53818add95d96e62c1f166288ab516604d09eb115fe82e492a77c08a8d5be11a5cf596fa6ecb3ab8932667b40cb4bfaec77a8b6fdafb29d1e460e79b02e328c6b97fb300ad2fb8db1ca5fdae9b9b601c49e5bfa1490afa4554a3992210ec6431f4702b8eab2f0c2cbe5e3b9f852f3dd4bb8d0317fc7b8a53fe23515246164", 0x86}, {&(0x7f0000001e40)="8fcf9f6f1b71c44feec3016ab607af555984c357770b25690d76858dc9a14eca7f5d01d40f494aabbc99d95574fb90706b75a85d3be17fbee4a9a9aed63d", 0x3e}, {&(0x7f0000001e80)="9c43057455f7e26fc8c79b703ab207af0cf40c0adf99064696cc16aa66c615fe9b908d3853b6bece95026f42cc03d1a72dc41473f0a76e5b37a1795c94fb82765938d90933a84247c83cb5a95646f4f0ad358313232d4da93bcc7711756cc85800f8a2d732360b03b1fe074dda73c1d2e11196f80b2e7bfb5202ead9d71a1021b26b820b618f53e7d89b408b58961a7902075d225bbb89755eea99b4d5e77cdd1c3423aed9720b65", 0xa8}], 0x5, &(0x7f0000002040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @private=0xa010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @multicast2, @multicast2}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x1, [{0x1, 0xb, "0392f4fe3ee28b37a7"}, {0x7, 0x9, "cf946c3df19d7a"}, {0x2, 0xb, "70f7834559613095bf"}, {0x0, 0x4, '0O'}, {0x7, 0x5, "c2984e"}]}, @lsrr={0x83, 0xb, 0x9e, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0xb, 0x23, [@multicast1, @empty]}, @ssrr={0x89, 0xb, 0xb6, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x26}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x81}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}], 0x118}}, {{&(0x7f00000031c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000004580)=[{&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000004200)="e431a04c52d2503896182758bc06d343f2ceaf756adbe596f0daab7bed2f7b4a6d517e56946c91affc1d3f818d75b099eb07fcf1f9b53707a7eaecbd9fb86911896213386b7a2e138c8637c45e12d05cd3c0663906484d04f5f9330d086f4656a9f2642101ab2359d3c78bbbc58cc2e0a09ee7e1f2e97a64cb4fff655a6fc0f35ff3f9dbfa28ae7df90e27216d996f33af5a37", 0x93}, {&(0x7f00000042c0)="1de027d2c02bbc38492adcb7af9f21c5e439681ee3ee84df4d87a42827bed92f248cf407089818f69e4d2b04a75297d0b44f2469bd88a68ddc9637a30315d4f02717cc21fb3a0fba6bd5a5e67d2dd4654ed6c8b49e12eb92ebc4bbfe0a1db8758b72e81fb04228242ddd3be778937cca0dd90e0c1736b0ca70eefd74105205ffa9fd5dcc9e451166cfe1edbe10388b5e52a5c70ade34f05369051374f420a92e3ff88e5f8a388a3c8c", 0xa9}, {&(0x7f0000004380)="61abbd1cd36f488fe5b808e2f011e9d8b4c1988c525798863a0ca6e725a03b4b72ee44ed08970d11ca6bb5f0297d137bb5d75d3cf8b5efeaa96d6f1b0600bf57825ab69e64d69eecaadc02025183d8939c8deefe9d8a9c9ae8561c1b732ab0395131736246062718f31b90c2456fcf2c986a5414eaa6da74f272ceaf50e13fa93b25431ed894b86cde5b5979e5b98350599209639e6e25c071eea4226bbc282176db64b911a114a3d739664716ecaa909ccdd2bd14f1deab209e13724a87dfe80b", 0xc1}, {&(0x7f0000004480)="d602e2935409db8250c56df7bba62645861056a993d37c662e613bf5d72c869f609c658b", 0x24}, {&(0x7f00000044c0)="de2f15e91700b1468102222f069942903e39f5b7d8d57adc99e2b31ee3cc6ae776325b29e87583a43380336541c246978d75d4428a240694e9c5e86fbfdff7127a2a186febc0dcc92a84f971b98cb89b313a96ce91d14944efecf5d32f6c36e320b5f107bb487b10eea60cc18aa949956c14dae5ebcc07071d112a10d45e4669ed7846ea1673587ac1673c005b25fb8bd718", 0x92}], 0x6, &(0x7f0000004600)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@rr={0x7, 0xf, 0x9e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010101]}, @cipso={0x86, 0x2d, 0x0, [{0x5, 0xe, "de8713561a1660f9c9848299"}, {0x6, 0x4, "71f3"}, {0x6, 0x6, "7c10c29a"}, {0x5, 0xf, "a6e4fe59b0cb0aea2b6cff79cf"}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x83, 0x5, "13323a"}, @end, @end, @timestamp={0x44, 0x1c, 0x46, 0x0, 0x7, [0x80, 0x1, 0x0, 0x80000001, 0x0, 0xffffcdbb]}]}}}], 0x88}}, {{&(0x7f00000046c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000004800)=[{&(0x7f0000004700)="7d777210077c734953dc29053ee623b40d04f05ee25c17d780234c3a1bcf4c034fed7d0b05374e0bc2b27b7783e77a545d67f7726ffbaeb369670698e35dee9c", 0x40}, {&(0x7f0000004740)="2c857dfdb39aad64935974aab14be0052e8e8eb4915c04b8468358744dcbc7dbebb5552b69170babd60e2d5da916d3a0d405914f48028242cc739420908d94d43c1c9c45d84a0a1a5258427c3164a3fefafa3d065468916c2ccb89c05167f05f55b71f411f3cc484d37c5dd1f103356853ce413998eb2cea03d6ee6837e94684e6e53353cc23a752b51549ba6beb01d65dcc1525877c1a6f642f4fcbd0949b2c00d6ea5d65973417922b863676f76c2cf61e", 0xb2}], 0x2}}, {{&(0x7f0000004840)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000005c80)=[{&(0x7f0000004880)="d4c26338d450f4d93f69b769207f63c966da4bae5d1396cf8ef7462fd8316acd3c3dfe539c927ebb45faef27e03d8e155a37055e21c84f", 0x37}, {&(0x7f00000048c0)="249629ed0c3a1817c2305eedda3fa259bf87d7a0424d5942e3699043f38058a7fd9f5239cde2ca7cca2ed983620d264b23bd3b61509ac204018d154cb6c08af7980b907e9330737f55ab3ad7294050f78230a45111376383525090ab0cec7341281dc8c00c2e9307891c77637c376ea682756dd6dafc413bcb3821bb34f9e3bfc26023193aa8867bd1200a22119d532ae0d0f877620a96adc5074dc988eab3e62c8580469ff2fe68c3a09f280ddc71c98db79555c6cf89a896f9119cea8def0db3ea84e48e85629174d9", 0xca}, {&(0x7f00000049c0)="7a475aa4d5af4fc07dcc7f3c766a0fb14dd7a46ef674cb9d11809398ad7416d3948263f2ad74ad4800250715cc6c2067fabe3aeeb11d6e2df620250ad483165664c0140dc5121b3bbe46a75840a8d1fde1bc15a3126401a680337cf7f16e81a1d5dc707f7ec39f73e9b2177f1a1c568f67447557e66fb7d9d4823d585ef40cbf26bb38ab02729616768e621bfceeed03aebd4daa1cde08e56bab0e349e3195d99b7a27d2852280078f87085554e3534f318c9a109a8119ace92a9fe4e20cc18f398a3308c4e365e6ad3ca70c5fb5de5e2d3a98022ada12", 0xd7}, {&(0x7f0000004ac0)="13df2aab4cc48328ba3b9517ed726b7bbfba2b90fe7ec4fcb3e9ca7b1928432d5b999a2e79f0b9cf28a59e166ee76573cac95d1f0d7abdad9b26c77d0205d6c686ea2777406c7d63fc2cea11", 0x4c}, {&(0x7f0000004b40)="604b642c48a116a97edfc989e28c3f73865c7e0c38991785fea117ed414920f3610f8233ad848d353e827a0a0eb4520f80aadf2d909cab3c4a737ec392c8cb0d5b7f2a5404055030cd239f58af2d6cb027b16a1cac9a12d462339c3823fdcc330b889b7a26437965f1dfcfd4ef7ed02f8e51927ae9c82da6087dd582bd20563eae8f77c5e12516324378c725bef063d20b51372ed84560757db0574cfbd1b46eed2b2cf92fc3811931233e98437696592d92524737df1fae24bdc8a77cec4a2d3e9f646fd5b73837c450d80356", 0xcd}, {&(0x7f0000004c40)="7304db328e0d", 0x6}, {&(0x7f0000004c80)="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", 0x1000}], 0x7, &(0x7f0000005d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@ra={0x94, 0x4}, @rr={0x7, 0x7, 0xd3, [@local]}, @generic={0x82, 0xd, "4d25676dcee9d209f460ad"}, @end, @lsrr={0x83, 0x1b, 0x2e, [@dev={0xac, 0x14, 0x14, 0x10}, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, @local]}, @cipso={0x86, 0x22, 0x3, [{0x0, 0x6, "a6418a92"}, {0x5, 0x5, "114c66"}, {0x6, 0xd, "b1dd399867187e786058c2"}, {0x6, 0x4, "04d8"}]}, @lsrr={0x83, 0x13, 0x70, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback]}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x29}}], 0xe0}}], 0x7, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff) [ 520.138036][T12095] Code: 7c 24 18 00 74 5c e8 79 62 c0 ff 81 cd 00 02 00 00 e9 5f ff ff ff e8 69 62 c0 ff 48 c7 c6 e0 30 79 8a 4c 89 e7 e8 5a 5c fe ff <0f> 0b 4c 89 ef e8 00 0f 16 00 e9 55 fd ff ff 4c 89 ef e8 93 0f 16 [ 520.170922][T12095] RSP: 0018:ffffc90015f37cf8 EFLAGS: 00010293 02:01:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@ipv4_newaddr={0x20, 0x14, 0x100, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xc8, r5}, [@IFA_ADDRESS={0x8, 0x1, @rand_addr=0x64010102}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4004810) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000b40)={&(0x7f0000004b80)=ANY=[], 0x226c}, 0x1, 0x0, 0x0, 0xe0}, 0x81) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400000000000000000000000089b8c6af8d224abf77f0556ae3014feadd3849646b2751a11dd457eee6924df8cd", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="d842d26dd69aa1decc4300"]) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r8, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000802}, 0x40010) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) dup3(r12, r4, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r2, 0x4, 0x1, 0x8, 0x8, 0x0, @loopback, @empty, 0x7800, 0x7800, 0x100}}) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=@ipv4_newnexthop={0xcc, 0x68, 0x200, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x0, 0x18}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUP={0x3c, 0x2, [{0x0, 0x5}, {0x0, 0x68}, {0x2}, {0x0, 0x3}, {0x2, 0x80}, {0x2, 0x8f}, {0x1, 0x4}]}, @NHA_OIF={0x8, 0x5, r13}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}, @NHA_RES_GROUP={0x54, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0xc7}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xfffffffc}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xea4}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf87f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xaa}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x80000000}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0xf28b}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_FDB={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x82}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000a40)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@getstats={0x1c, 0x5e, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, 0x5}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x1) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlinkprop={0x64, 0x6c, 0x1, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, 0x2074, 0x2026}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x4}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}, {0x14, 0x35, 'nr0\x00'}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xfc93}, @IFLA_CARRIER={0x5, 0x21, 0x7f}]}, 0x64}}, 0x0) 02:01:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) readv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/175, 0xaf}], 0x1) sendto$inet6(r0, &(0x7f0000000080)="05032a072c0660000c030c2cfff57b016d2763bd563788a8398d894f0fe58902591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801601842fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd00000000", 0x6b, 0x4000002, 0x0, 0x0) [ 520.229716][T12095] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 520.260942][T12095] RDX: ffff888078768000 RSI: ffffffff81c6de36 RDI: 0000000000000000 [ 520.284611][T12095] RBP: 0000000000000200 R08: 0000000000000000 R09: fffffbfff1d5a78a [ 520.308609][T12095] R10: ffffffff8ead3c57 R11: 0000000000000000 R12: ffffea00007b2a40 [ 520.324565][T12095] R13: ffffc90015f37dc0 R14: 0000000000000a55 R15: 0000000000000000 [ 520.335172][T12095] FS: 00007faf348396c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 520.346040][T12095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.355870][T12095] CR2: 0000001b30b21000 CR3: 0000000019f22000 CR4: 00000000003506f0 [ 520.364862][T12095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.373458][T12095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.383614][T12095] Kernel panic - not syncing: Fatal exception [ 520.390043][T12095] Kernel Offset: disabled [ 520.394376][T12095] Rebooting in 86400 seconds..