, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r2, 0x8, 0x401, 0x100, 0xc}, &(0x7f0000000100)=0x14) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_io_uring_complete(0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r3, 0x9b04, 0x3}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000280)=""/218, &(0x7f0000000380)=0xda) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x8, 0x96}, {0x2, 0x6}, 0x1, 0x3, 0x39}) close_range(r4, 0xffffffffffffffff, 0x0) 23:56:52 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) sendto$inet(r1, &(0x7f0000000280)="56d905215ab291fe1af7ab66c0df4736fae90c0b3890f6181a297f93083fd7645b6ec0d315a5fb22428ccd0e66913f58d09dd0bd31f4768876ac485f2ed96f1a923273f12c6452464cfec6d74c3a4313163a35b0da182750a826b9c189cfa4be895e2aacc5cb150593f82a54a3fb10e2ab35daf25bc59a70b629f39663ba43a58a7b9b50b5167c9b84a9fa6842150b32b965b45563d8dbcbc31cdab4f45d4be09820b745b9d68db14b39ac4321c3714e77b9bd9b64e60b699e55f17071a6871ea163265b64dfc34d4f0a453e9be57e0b5838395a73b5423036dba7e8f290", 0xde, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 785.562931][T28909] binder: 28907:28909 unknown command 0 [ 785.562953][T28909] binder: 28907:28909 ioctl c0306201 20000080 returned -22 23:56:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 785.584929][T28909] binder: 28907:28909 ioctl c0306201 20001480 returned -14 23:56:52 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:52 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:53 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000014c0)=0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001800)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000001900)=0xe8) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003040)={'#! ', './file0', [{0x20, '\x00'}, {}, {0x20, '\x00'}, {0x20, '&A\'^_!7{-&$+}/'}], 0xa, "7d0b9934a2b79c4899568d44bcaecabaacaa508c2f6477eed0f52d7f39f85984aa644b5499"}, 0x44) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0500000000000000000007000000"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = getpgid(0xffffffffffffffff) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000140)="88de4cd184fa65dd7da9ef605ec3fb307a3218b7a3428be9c42734bfa9b1b9d5db9ffad92fd98354025296f79fa8d8bbf0822231bc38eb4494247bc53097", 0x3e}, {&(0x7f0000000180)="dc08c0e13c051b11fb660a64ad59b711ae29febf52cb37132850c8247d533ec3e65fa19568976958b0b5d2fb27f6a540486cba80e949c6", 0x37}, {&(0x7f00000001c0)="7fe3602d93052c5c9b6479fa96ee34cb015604aaab3c48bdb789cb43d2497c9d31901b016c8b08751ac42fc47bb5ccf2968cf2111200da02cef44766930828791e339242c22aa7aee5e454577d", 0x4d}, {&(0x7f0000000240)="af96bb189b072252b190a32a5a73983ae5e13e58a0897702e0f72bb3a9960a09988467ca2e639a92329cb173a3528018bc6c7dcf4c86e7c6532e92c5e74f8b101385c2a77b889d5fe3cb53dc46be46271a688b5d7aee786d4d310cc6074681c9ddc152fbc3d5fc", 0x67}, {&(0x7f00000002c0)="c7564554058be2ffe3b600ff615f7c82ac7c8fa9e9586bac0d6aa47d3e1da08c075c592c945ce135cb5f0114", 0x2c}, {&(0x7f0000000300)="0ef85ec8bfc51e04e59dd8490d20b6db28edbb8078609bf594350d3037e04b5bf481220de6fc94f093122bdb490fbc9b191dd9b2e387d0ba0916650e57d987c631183a61b289c3103351cdfc518727fc0d10c28023842f36ef421818954e8489d344799846b9fad9891740b3d0eb9ac27bf556dea0cd568528ab21c86df0f95da0a6cf8af6a432d862800be16354148ead4e4305813137199a9d4be701ea53ab89885c56d2db113c309c1631af47dfc95bd6e04694999b709cf1", 0xba}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="7d22a6b99b0ce1b6a706e92fd4a8b97a63e92707fd47ddfad326cb5c53d303c85b5b4580b80665f5a880f5c0906aae255c532c543560b4c082678b68aa09e321b94675be6b599bd9b926a4eb9aed235e4108c201c11928e8b0329c8bf5cf9b926006b2fa9fbe95cceb03645e7d81e21c7083d3e240", 0x75}], 0x8, &(0x7f00000015c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}], 0x50, 0x48800}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001640)="6031690dc69dca32a901e5006d63", 0xe}, {&(0x7f0000001680)="f7846d8619543af029263037deaa4a2491d3966ea1ffb26cae676ff419f73e7735f5b040b5020c8c09872931112fa76df441c7293e9746ef4a47d662abf78f", 0x3f}, {&(0x7f00000016c0)="c7d585ff33602633a1490976995670f9367932c0c984c75ff5b6f7fe43b91133b808eada44391b98ca682aac85bad06ceca024", 0x33}, {&(0x7f0000001700)="dea7ccee64a4111196952050d3d43628115b16fb1d91974147bd484c10273136d637792ca407b1032f66aa211b82b82865ba24c9804d88ceba7cdfaa2cedf9aea2ec99be9acc89818cd7bf707704cdc0bea3aa807df0c08b8dc8c2e93ee8eef9c8bcdbab354646dc1dee8fbc3481c3398e931cd6251b54a9676253625c0da1e2d272f141a82dfa2205ed01ef0874f7e9bba95481a057b48c2f7ca2b1dfa8d3f9143d7cc4c4c260507f", 0xa9}], 0x4, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xffffffffffffffff}}}], 0x20, 0x24000080}}, {{&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001a00)="a813147846a952653ea490357aee58001e641a81d4a19206128e4a87ce0780f0651f0ec80863d6d15de4d04829f6f334737c2c9916834f3ead7a3768105b6aad9927a63ba781eaf133fbae24c0ea37915ef2279ba347143189a7fad4fd00e7dc0bf67f9faa3378441e3ab0b5ff8ba57973a3ee29affe", 0x76}, {&(0x7f0000001a80)="138debbe99cca0802ad4908c50a3f7e318d91430ee810a114a0a92d921a54fec11c5ea3b3b3c57a9286d8ade9f0fbb7a4c04c2fc25b1e5597c494b5c647133e9310c649582379c71675c9a198735b3042441ad0adc4ef6282844e08b47a1b941151eae435269", 0x66}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="f28afc1c5d8b99d5573bdb3509c514a7994c1f73c119c0083bc65c4e92e67237852d07f73f9ba463479db401082abab9a6242296262577a29fefc9a5798867d0aac2c3f5df2eff33ea13b25a224cf871dfc6d216abc607adb6882bff20a75009f0e92725f4d62856ed9e3304990a0b18f91e64d90bbad5c4109a9c8b2d752c3e4145d04fe3c983e555c2e6d18f3a", 0x8e}, {&(0x7f0000002bc0)="779b6c55f9ad800322a0afca3e2692408f850b8307a4c442c4b993db1943bd12e46213bbbe1301057cf77bb92cea180a3f7d9df85546b40afa0d40f912836c1895f3d9064a038fc8a3bb06d2f938ef3d05bd3b46f73717edacce9c9ad5e3598458bf80576d8d24dca3787308d29de5cf5c2806b25a60767fbe585b9bcd84761e8a33df90367e2dab3199", 0x8a}, {&(0x7f0000002c80)="67463866b0d97ba0a7e5bab1b57e398a86642eceecbf3a1dd7fbf50839c6029c91b7a755d285efd5d0b161d9b3a76d1295f640172d83038bdc6b3f8b84cb3066ab4651d7cfd403458a22115b5ddd6459105f605abef388807561fd8d4d87371fbf8cc86bdded", 0x66}, {&(0x7f0000002d00)="401adaaa90ea6e73be9d07daa688112cb18d2034c28bd942f781811a47f2d52b03b5f94a648b9639a4b48324638924d931f3ad3efa877a2a1f6920280212def31362e4b4a684fdd00bc48239347b74f504da328de07053402f", 0x59}, {&(0x7f0000002d80)}, {&(0x7f0000002dc0)="dc90e231fdb4a5bb079de0766246ac6fb056e4c6671659daeecd4f7956325969e4a8bd944a73f720e284804331f953192ed59261f832ee726f5673847ca85cf30945595c3f2d98fffaafbdf8f96726b0dd9aa9be78f2", 0x56}], 0x9, &(0x7f0000002f00)=[@rights={{0x18, 0x1, 0x1, [r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r8, r0, r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x78, 0x44}}], 0x3, 0x20000001) write(r0, &(0x7f0000000000)="05", 0x7e53d) 23:56:53 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async, rerun: 32) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) sendto$inet(r1, &(0x7f0000000280)="56d905215ab291fe1af7ab66c0df4736fae90c0b3890f6181a297f93083fd7645b6ec0d315a5fb22428ccd0e66913f58d09dd0bd31f4768876ac485f2ed96f1a923273f12c6452464cfec6d74c3a4313163a35b0da182750a826b9c189cfa4be895e2aacc5cb150593f82a54a3fb10e2ab35daf25bc59a70b629f39663ba43a58a7b9b50b5167c9b84a9fa6842150b32b965b45563d8dbcbc31cdab4f45d4be09820b745b9d68db14b39ac4321c3714e77b9bd9b64e60b699e55f17071a6871ea163265b64dfc34d4f0a453e9be57e0b5838395a73b5423036dba7e8f290", 0xde, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:56:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) fadvise64(r1, 0x8, 0x0, 0x5) [ 785.741467][T28940] binder: 28939:28940 unknown command 0 [ 785.741487][T28940] binder: 28939:28940 ioctl c0306201 20000080 returned -22 [ 785.743239][T28940] binder: 28939:28940 ioctl c0306201 20001480 returned -14 23:56:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x34000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:53 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x80) sendto$inet(r1, &(0x7f0000000280)="56d905215ab291fe1af7ab66c0df4736fae90c0b3890f6181a297f93083fd7645b6ec0d315a5fb22428ccd0e66913f58d09dd0bd31f4768876ac485f2ed96f1a923273f12c6452464cfec6d74c3a4313163a35b0da182750a826b9c189cfa4be895e2aacc5cb150593f82a54a3fb10e2ab35daf25bc59a70b629f39663ba43a58a7b9b50b5167c9b84a9fa6842150b32b965b45563d8dbcbc31cdab4f45d4be09820b745b9d68db14b39ac4321c3714e77b9bd9b64e60b699e55f17071a6871ea163265b64dfc34d4f0a453e9be57e0b5838395a73b5423036dba7e8f290", 0xde, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) creat(&(0x7f0000000100)='./file0\x00', 0x80) (async) sendto$inet(r1, &(0x7f0000000280)="56d905215ab291fe1af7ab66c0df4736fae90c0b3890f6181a297f93083fd7645b6ec0d315a5fb22428ccd0e66913f58d09dd0bd31f4768876ac485f2ed96f1a923273f12c6452464cfec6d74c3a4313163a35b0da182750a826b9c189cfa4be895e2aacc5cb150593f82a54a3fb10e2ab35daf25bc59a70b629f39663ba43a58a7b9b50b5167c9b84a9fa6842150b32b965b45563d8dbcbc31cdab4f45d4be09820b745b9d68db14b39ac4321c3714e77b9bd9b64e60b699e55f17071a6871ea163265b64dfc34d4f0a453e9be57e0b5838395a73b5423036dba7e8f290", 0xde, 0x0, &(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) [ 785.875806][T28950] binder: 28945:28950 unknown command 0 [ 785.875828][T28950] binder: 28945:28950 ioctl c0306201 20000080 returned -22 [ 785.880977][T28950] binder: 28945:28950 ioctl c0306201 20001480 returned -14 23:56:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x400300, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 785.891740][T28952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:56:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) fadvise64(r1, 0x8, 0x0, 0x5) [ 786.023730][T28960] binder: 28959:28960 unknown command 25348 [ 786.023752][T28960] binder: 28959:28960 ioctl c0306201 20000080 returned -22 23:56:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf0ffff, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 786.054545][T28960] binder: 28959:28960 ioctl c0306201 20001480 returned -14 [ 786.200148][T28982] binder: 28979:28982 unknown command 25348 [ 786.203711][T28982] binder: 28979:28982 ioctl c0306201 20000080 returned -22 [ 786.220511][T28982] binder: 28979:28982 ioctl c0306201 20001480 returned -14 23:56:53 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:53 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_getvlan={0x30, 0x72, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x5, [@rand_addr=0x64010102, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, 0x24) 23:56:53 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) fadvise64(r1, 0x8, 0x0, 0x5) 23:56:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 786.707022][T28998] binder: 28984:28998 unknown command 25348 [ 786.707044][T28998] binder: 28984:28998 ioctl c0306201 20000080 returned -22 23:56:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 786.748070][T28998] binder: 28984:28998 ioctl c0306201 20001480 returned -14 [ 786.761242][T29000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:56:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 786.846825][T29009] binder: 29007:29009 unknown command 287492 [ 786.847425][T29009] binder: 29007:29009 ioctl c0306201 20000080 returned -22 23:56:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 786.849697][T29009] binder: 29007:29009 ioctl c0306201 20001480 returned -14 23:56:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_getvlan={0x30, 0x72, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x5, [@rand_addr=0x64010102, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, 0x24) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_getvlan={0x30, 0x72, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x5, [@rand_addr=0x64010102, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, 0x24) (async) [ 786.940048][T29013] binder: 29011:29013 unknown command 287492 [ 786.940069][T29013] binder: 29011:29013 ioctl c0306201 20000080 returned -22 23:56:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:54 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_getvlan={0x30, 0x72, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48080) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x5, [@rand_addr=0x64010102, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, 0x24) [ 786.943876][T29013] binder: 29011:29013 ioctl c0306201 20001480 returned -14 [ 787.032811][T29018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:56:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 787.098228][T29021] binder: 29019:29021 unknown command 287492 [ 787.098250][T29021] binder: 29019:29021 ioctl c0306201 20000080 returned -22 [ 787.099813][T29021] binder: 29019:29021 ioctl c0306201 20001480 returned -14 [ 787.155178][T29025] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:56:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) pipe(&(0x7f0000000200)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:56:54 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:54 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x5000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:54 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@bridge_getvlan={0x30, 0x72, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48080) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000100)=0x6, 0x4) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)={@remote, @local, 0x0, 0x5, [@rand_addr=0x64010102, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast]}, 0x24) 23:56:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x6000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 787.718381][T29043] binder: BINDER_SET_CONTEXT_MGR already set [ 787.718393][T29043] binder: 29038:29043 ioctl 40046207 0 returned -16 [ 787.718838][T29043] binder: 29038:29043 ioctl c0306201 20001480 returned -14 23:56:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 787.777984][T29039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:56:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 787.872597][T29070] binder: BINDER_SET_CONTEXT_MGR already set [ 787.872609][T29070] binder: 29055:29070 ioctl 40046207 0 returned -16 [ 787.872879][T29070] binder: 29055:29070 ioctl c0306201 20001480 returned -14 23:56:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) pipe(&(0x7f0000000200)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:56:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x7000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:55 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 788.010356][T29074] binder: BINDER_SET_CONTEXT_MGR already set [ 788.010368][T29074] binder: 29073:29074 ioctl 40046207 0 returned -16 23:56:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 788.010715][T29074] binder: 29073:29074 ioctl c0306201 20001480 returned -14 23:56:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 788.158370][T29089] binder: BINDER_SET_CONTEXT_MGR already set [ 788.158383][T29089] binder: 29086:29089 ioctl 40046207 0 returned -16 23:56:55 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:55 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x9000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 788.158715][T29089] binder: 29086:29089 ioctl c0306201 20001480 returned -14 23:56:55 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x3, 0x1, 0x1, 'queue1\x00', 0x4}) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) finit_module(r4, &(0x7f0000000180)='&^\x00', 0x3) 23:56:55 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 788.335169][T29103] binder: BINDER_SET_CONTEXT_MGR already set [ 788.335181][T29103] binder: 29099:29103 ioctl 40046207 0 returned -16 [ 788.347870][T29103] binder: 29099:29103 ioctl c0306201 20001480 returned -14 23:56:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xa000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:56 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x3, 0x1, 0x1, 'queue1\x00', 0x4}) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) finit_module(r4, &(0x7f0000000180)='&^\x00', 0x3) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x3, 0x1, 0x1, 'queue1\x00', 0x4}) (async) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) (async) socket$bt_bnep(0x1f, 0x3, 0x4) (async) finit_module(r4, &(0x7f0000000180)='&^\x00', 0x3) (async) 23:56:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) socket$inet6_sctp(0xa, 0x4, 0x84) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) 23:56:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xb000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 788.927639][T29118] binder: BINDER_SET_CONTEXT_MGR already set [ 788.927651][T29118] binder: 29116:29118 ioctl 40046207 0 returned -16 23:56:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x5}, @sack_perm], 0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:56:56 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 788.927939][T29118] binder: 29116:29118 ioctl c0306201 20001480 returned -14 23:56:56 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xc000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:56 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x3, 0x1, 0x1, 'queue1\x00', 0x4}) (async) mmap$dsp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xa, 0x8010, r0, 0x0) (async) r4 = socket$bt_bnep(0x1f, 0x3, 0x4) finit_module(r4, &(0x7f0000000180)='&^\x00', 0x3) 23:56:56 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x5}, @sack_perm], 0x3) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x5}, @sack_perm], 0x3) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) [ 789.187241][T29147] binder: BINDER_SET_CONTEXT_MGR already set [ 789.187254][T29147] binder: 29146:29147 ioctl 40046207 0 returned -16 [ 789.187536][T29147] binder: 29146:29147 ioctl c0306201 20001480 returned -14 23:56:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xe000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xc8, r4, 0x4d5eb8b605b04fd5, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc0, 0x54}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x3}, {0x80, 0x2}, {0x8, 0x1}, {0x3f, 0x1}, {0x1, 0x6}, {0x2, 0x6}], "8fe6cfa5b52b0743"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x5}, {0xff, 0x2}, {0x20, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x9, 0x7}, {0x5, 0x2}, {0xe0, 0x7}, {0x1, 0x4}, {0xaa, 0x2}, {0x0, 0x7}, {0x9, 0x1}, {0x5, 0x6}, {0x7f, 0xa0}, {0x8, 0x7}, {0x4}], "63c612fb35501403"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x40, 0x3}, {0x37, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x3f, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x40, 0x2}], "760b80330a987ed7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6e}, {0x3, 0x7}, {0xe9}, {0x80, 0x1}, {0x1, 0x7}, {0xff, 0x2}, {0x32, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x8, 0x6}, {0x5, 0x4}], "097f8d0b0e14aabf"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x80}, {0x1}, {0x4, 0x3}], "5a2b09ab52283310"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0xc000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000340)="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", 0x1ba, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r6, &(0x7f0000000180)={[0x800]}, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080)) 23:56:57 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='nv\x00', 0x3) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x3}, @mss={0x2, 0x5}, @sack_perm], 0x3) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:56:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:57 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002240)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9768f4d7020d09314d85aaa8dab8", 0xe}, {&(0x7f0000000280)="4d201ffdcfb0168e07e0e0b4d2061a0e841b680ac37faaf2bee9991718125b07826115b320d0797edde8bda613256293e7f3d60fae996c87129b58ab3d8bb6b8b56aeb6e24e70ad639b05a0421e07e7df7b8a808ca1ac1fc1d87d48051b6383d9bc72ea3e7bb57a7b6f478547ac773677c3587fae0e70c96052375f870f6a67fce7f84eea53166d762bfd1a04e96d675e6ed8225", 0x94}, {&(0x7f0000000340)="5256f3279129337631592de335c9784dd3e5e8cadf4ddf1a8efbcab580e61536de811fd68514229b6e0388c0bc5597f910f3cf5bafa1d15e348d951c807ad25a3939816b5777c155a12bf350bde093a59b9eacde03a4cee8d3620997808cceca5c2b5c17a171203b87dedee8f40869d3ee7ae21c0185004c08ea4cf08dfe", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="1dc773b0f16b37ceaa8c6c8462e71b0dff5386d41042546b3732600fb2c08d9b805698ae831c2454f410dbbc946c113e2f6cc57f52", 0x35}, {&(0x7f0000000440)="b4d6bd30c94c36b4311187af584b1d9ab31de8ce7c70e62c12b0a923f09514052af4238739703f0b3bb40b01c98f1074d9a46f0323", 0x35}, {&(0x7f0000000480)="47fc413d1f8714b0cbec13efbec7b33c4c4cb9d258f022ef2c8fb1752346374ab862aaad4a10271d9454caed7ccdbcad08e8b05b41a97056bea3c32352618bb3e515dc75b49f5024723d53370623", 0x4e}, {&(0x7f0000000500)="a9b323afb3ae16741df92197334b2679998b31781411e5", 0x17}, {&(0x7f0000000540)="4e4285cf33bfc9ae5a4d607276cfb8b8b1715ac82933e99aab6a217bc052f45a519c6af55045af3a6d69e855cd49f01030a90314cb7a23b45aaa31e6302fc37cb51d7882e093be1e1de55232615ce4b6f3f989db09778eed00a35b1f325d265e60673d46ca68830113a072771de6ca64c511a90009bb4b200bcac155e0195d0fa7b71588ff3f6db7", 0x88}], 0x5, &(0x7f0000000680)=[{0x58, 0x113, 0xc16, "f3f49f9fbe0e462c819e7c6623dafeb5f6a70af63897d5c24ca018ccd51ccbc9b18b01f9ec09ee8ccefdf8c78901f09f467579b40ed8ebfc80e2f52236757c4f2c90c8a4503dca3a"}], 0x58}}, {{&(0x7f0000000700)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="56d915b5f6d7c499a3ee1f991031d994b3f2705014bfc5755aefcae55f5b49db5e3e8f6d370c641c13da57aa2502e1598b05963ad048e0dc4cce589e342bded0584c044e21f81a9722a4e4c8038668cf9fa42a4ab2145a8b8dd0c4e04efaeec6c4d55f1a61fc7b27af7c9281267dd3be2f2741e150102a4d29b316ccdf8b50279b3014d842843ecbcab58ceb5f91007588ccb49b8016de1ed02ffc11770290ff6d86e1728ed3228752c642c76dd971816836b325c1fd9297aaca4ccb0f19f494cfe903c1eeb0bb9690a07d0870f540aa0f55068c98d7cdfde6a37a22fda99cac0af2bc083fe325d939aa148fdb8a7fde02fc7235f1", 0xf5}, {&(0x7f0000000880)="eb807e19bca13c7ef5adce5e842c17a2f8eac9b43309e959e16ac8d47daa1311e65cc1778a33210624646893964c097dd7059d15f58778de30282c0c3bf3ba6d04c336995396599ffc4f28e99c5cfbc6f228440c3d844f500eab840a71", 0x5d}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x598}}, {{&(0x7f0000000f00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106-gcm-aesni)\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f80)="ec9ae429ab931743950ed6cd635971083027fa408b4c3359c6d46ca03aac43ce06548aa8270cc72e87ac9adea4bc", 0x2e}, {&(0x7f0000000fc0)="ed7b933cb8b92957a26ec195b500b14ea602c33de1b4f1952dc366d21af64d9e7833d6fa47db727a156b16987c13aac5a7d14983ebdae473dfb1822f60580a82ca7069cbc6d22ee615c3a28b011a98938d27f6762070ea08cd93531d90c2cbce0bb1997036ff81350beb39c2034e0a86f8e30d61df4f19c11960502c8cabeabe0dbf312452669dcaad40b0f9d06a0724aa64acf52d0f0c819ca1534e6ed6ce2b014093fa2387c9368da165114cf2553eb418d8c619a9fa9b0c996fef0863fd551fb7a754e2363a51ea2ee9809290833bc471084e12a08addd60024fb542f1c35136ac2", 0xe3}], 0x2, &(0x7f0000001100)=[{0x18, 0x108, 0xffffff7f, "3ed8"}, {0x1010, 0x0, 0x6, "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"}], 0x1028}}], 0x4, 0x24004040) [ 789.973167][T29174] binder: BINDER_SET_CONTEXT_MGR already set [ 789.973178][T29174] binder: 29159:29174 ioctl 40046207 0 returned -16 23:56:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 789.973464][T29174] binder: 29159:29174 ioctl c0306201 20001480 returned -14 23:56:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xc8, r4, 0x4d5eb8b605b04fd5, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc0, 0x54}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x3}, {0x80, 0x2}, {0x8, 0x1}, {0x3f, 0x1}, {0x1, 0x6}, {0x2, 0x6}], "8fe6cfa5b52b0743"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x5}, {0xff, 0x2}, {0x20, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x9, 0x7}, {0x5, 0x2}, {0xe0, 0x7}, {0x1, 0x4}, {0xaa, 0x2}, {0x0, 0x7}, {0x9, 0x1}, {0x5, 0x6}, {0x7f, 0xa0}, {0x8, 0x7}, {0x4}], "63c612fb35501403"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x40, 0x3}, {0x37, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x3f, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x40, 0x2}], "760b80330a987ed7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6e}, {0x3, 0x7}, {0xe9}, {0x80, 0x1}, {0x1, 0x7}, {0xff, 0x2}, {0x32, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x8, 0x6}, {0x5, 0x4}], "097f8d0b0e14aabf"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x80}, {0x1}, {0x4, 0x3}], "5a2b09ab52283310"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async, rerun: 32) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async, rerun: 32) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000340)="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", 0x1ba, 0x1, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r6, &(0x7f0000000180)={[0x800]}, 0x8, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_merged\x00', 0x0, 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080)) 23:56:57 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 790.103661][T29186] binder: BINDER_SET_CONTEXT_MGR already set [ 790.103674][T29186] binder: 29185:29186 ioctl 40046207 0 returned -16 [ 790.103961][T29186] binder: 29185:29186 ioctl c0306201 20001480 returned -14 [ 790.171961][T29188] binder: 29187:29188 ioctl c0306201 20001480 returned -14 23:56:58 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002240)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9768f4d7020d09314d85aaa8dab8", 0xe}, {&(0x7f0000000280)="4d201ffdcfb0168e07e0e0b4d2061a0e841b680ac37faaf2bee9991718125b07826115b320d0797edde8bda613256293e7f3d60fae996c87129b58ab3d8bb6b8b56aeb6e24e70ad639b05a0421e07e7df7b8a808ca1ac1fc1d87d48051b6383d9bc72ea3e7bb57a7b6f478547ac773677c3587fae0e70c96052375f870f6a67fce7f84eea53166d762bfd1a04e96d675e6ed8225", 0x94}, {&(0x7f0000000340)="5256f3279129337631592de335c9784dd3e5e8cadf4ddf1a8efbcab580e61536de811fd68514229b6e0388c0bc5597f910f3cf5bafa1d15e348d951c807ad25a3939816b5777c155a12bf350bde093a59b9eacde03a4cee8d3620997808cceca5c2b5c17a171203b87dedee8f40869d3ee7ae21c0185004c08ea4cf08dfe", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="1dc773b0f16b37ceaa8c6c8462e71b0dff5386d41042546b3732600fb2c08d9b805698ae831c2454f410dbbc946c113e2f6cc57f52", 0x35}, {&(0x7f0000000440)="b4d6bd30c94c36b4311187af584b1d9ab31de8ce7c70e62c12b0a923f09514052af4238739703f0b3bb40b01c98f1074d9a46f0323", 0x35}, {&(0x7f0000000480)="47fc413d1f8714b0cbec13efbec7b33c4c4cb9d258f022ef2c8fb1752346374ab862aaad4a10271d9454caed7ccdbcad08e8b05b41a97056bea3c32352618bb3e515dc75b49f5024723d53370623", 0x4e}, {&(0x7f0000000500)="a9b323afb3ae16741df92197334b2679998b31781411e5", 0x17}, {&(0x7f0000000540)="4e4285cf33bfc9ae5a4d607276cfb8b8b1715ac82933e99aab6a217bc052f45a519c6af55045af3a6d69e855cd49f01030a90314cb7a23b45aaa31e6302fc37cb51d7882e093be1e1de55232615ce4b6f3f989db09778eed00a35b1f325d265e60673d46ca68830113a072771de6ca64c511a90009bb4b200bcac155e0195d0fa7b71588ff3f6db7", 0x88}], 0x5, &(0x7f0000000680)=[{0x58, 0x113, 0xc16, "f3f49f9fbe0e462c819e7c6623dafeb5f6a70af63897d5c24ca018ccd51ccbc9b18b01f9ec09ee8ccefdf8c78901f09f467579b40ed8ebfc80e2f52236757c4f2c90c8a4503dca3a"}], 0x58}}, {{&(0x7f0000000700)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="56d915b5f6d7c499a3ee1f991031d994b3f2705014bfc5755aefcae55f5b49db5e3e8f6d370c641c13da57aa2502e1598b05963ad048e0dc4cce589e342bded0584c044e21f81a9722a4e4c8038668cf9fa42a4ab2145a8b8dd0c4e04efaeec6c4d55f1a61fc7b27af7c9281267dd3be2f2741e150102a4d29b316ccdf8b50279b3014d842843ecbcab58ceb5f91007588ccb49b8016de1ed02ffc11770290ff6d86e1728ed3228752c642c76dd971816836b325c1fd9297aaca4ccb0f19f494cfe903c1eeb0bb9690a07d0870f540aa0f55068c98d7cdfde6a37a22fda99cac0af2bc083fe325d939aa148fdb8a7fde02fc7235f1", 0xf5}, {&(0x7f0000000880)="eb807e19bca13c7ef5adce5e842c17a2f8eac9b43309e959e16ac8d47daa1311e65cc1778a33210624646893964c097dd7059d15f58778de30282c0c3bf3ba6d04c336995396599ffc4f28e99c5cfbc6f228440c3d844f500eab840a71", 0x5d}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x598}}, {{&(0x7f0000000f00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106-gcm-aesni)\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f80)="ec9ae429ab931743950ed6cd635971083027fa408b4c3359c6d46ca03aac43ce06548aa8270cc72e87ac9adea4bc", 0x2e}, {&(0x7f0000000fc0)="ed7b933cb8b92957a26ec195b500b14ea602c33de1b4f1952dc366d21af64d9e7833d6fa47db727a156b16987c13aac5a7d14983ebdae473dfb1822f60580a82ca7069cbc6d22ee615c3a28b011a98938d27f6762070ea08cd93531d90c2cbce0bb1997036ff81350beb39c2034e0a86f8e30d61df4f19c11960502c8cabeabe0dbf312452669dcaad40b0f9d06a0724aa64acf52d0f0c819ca1534e6ed6ce2b014093fa2387c9368da165114cf2553eb418d8c619a9fa9b0c996fef0863fd551fb7a754e2363a51ea2ee9809290833bc471084e12a08addd60024fb542f1c35136ac2", 0xe3}], 0x2, &(0x7f0000001100)=[{0x18, 0x108, 0xffffff7f, "3ed8"}, {0x1010, 0x0, 0x6, "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"}], 0x1028}}], 0x4, 0x24004040) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002240)='nv\x00', 0x3) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9768f4d7020d09314d85aaa8dab8", 0xe}, {&(0x7f0000000280)="4d201ffdcfb0168e07e0e0b4d2061a0e841b680ac37faaf2bee9991718125b07826115b320d0797edde8bda613256293e7f3d60fae996c87129b58ab3d8bb6b8b56aeb6e24e70ad639b05a0421e07e7df7b8a808ca1ac1fc1d87d48051b6383d9bc72ea3e7bb57a7b6f478547ac773677c3587fae0e70c96052375f870f6a67fce7f84eea53166d762bfd1a04e96d675e6ed8225", 0x94}, {&(0x7f0000000340)="5256f3279129337631592de335c9784dd3e5e8cadf4ddf1a8efbcab580e61536de811fd68514229b6e0388c0bc5597f910f3cf5bafa1d15e348d951c807ad25a3939816b5777c155a12bf350bde093a59b9eacde03a4cee8d3620997808cceca5c2b5c17a171203b87dedee8f40869d3ee7ae21c0185004c08ea4cf08dfe", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="1dc773b0f16b37ceaa8c6c8462e71b0dff5386d41042546b3732600fb2c08d9b805698ae831c2454f410dbbc946c113e2f6cc57f52", 0x35}, {&(0x7f0000000440)="b4d6bd30c94c36b4311187af584b1d9ab31de8ce7c70e62c12b0a923f09514052af4238739703f0b3bb40b01c98f1074d9a46f0323", 0x35}, {&(0x7f0000000480)="47fc413d1f8714b0cbec13efbec7b33c4c4cb9d258f022ef2c8fb1752346374ab862aaad4a10271d9454caed7ccdbcad08e8b05b41a97056bea3c32352618bb3e515dc75b49f5024723d53370623", 0x4e}, {&(0x7f0000000500)="a9b323afb3ae16741df92197334b2679998b31781411e5", 0x17}, {&(0x7f0000000540)="4e4285cf33bfc9ae5a4d607276cfb8b8b1715ac82933e99aab6a217bc052f45a519c6af55045af3a6d69e855cd49f01030a90314cb7a23b45aaa31e6302fc37cb51d7882e093be1e1de55232615ce4b6f3f989db09778eed00a35b1f325d265e60673d46ca68830113a072771de6ca64c511a90009bb4b200bcac155e0195d0fa7b71588ff3f6db7", 0x88}], 0x5, &(0x7f0000000680)=[{0x58, 0x113, 0xc16, "f3f49f9fbe0e462c819e7c6623dafeb5f6a70af63897d5c24ca018ccd51ccbc9b18b01f9ec09ee8ccefdf8c78901f09f467579b40ed8ebfc80e2f52236757c4f2c90c8a4503dca3a"}], 0x58}}, {{&(0x7f0000000700)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="56d915b5f6d7c499a3ee1f991031d994b3f2705014bfc5755aefcae55f5b49db5e3e8f6d370c641c13da57aa2502e1598b05963ad048e0dc4cce589e342bded0584c044e21f81a9722a4e4c8038668cf9fa42a4ab2145a8b8dd0c4e04efaeec6c4d55f1a61fc7b27af7c9281267dd3be2f2741e150102a4d29b316ccdf8b50279b3014d842843ecbcab58ceb5f91007588ccb49b8016de1ed02ffc11770290ff6d86e1728ed3228752c642c76dd971816836b325c1fd9297aaca4ccb0f19f494cfe903c1eeb0bb9690a07d0870f540aa0f55068c98d7cdfde6a37a22fda99cac0af2bc083fe325d939aa148fdb8a7fde02fc7235f1", 0xf5}, {&(0x7f0000000880)="eb807e19bca13c7ef5adce5e842c17a2f8eac9b43309e959e16ac8d47daa1311e65cc1778a33210624646893964c097dd7059d15f58778de30282c0c3bf3ba6d04c336995396599ffc4f28e99c5cfbc6f228440c3d844f500eab840a71", 0x5d}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x598}}, {{&(0x7f0000000f00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106-gcm-aesni)\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f80)="ec9ae429ab931743950ed6cd635971083027fa408b4c3359c6d46ca03aac43ce06548aa8270cc72e87ac9adea4bc", 0x2e}, {&(0x7f0000000fc0)="ed7b933cb8b92957a26ec195b500b14ea602c33de1b4f1952dc366d21af64d9e7833d6fa47db727a156b16987c13aac5a7d14983ebdae473dfb1822f60580a82ca7069cbc6d22ee615c3a28b011a98938d27f6762070ea08cd93531d90c2cbce0bb1997036ff81350beb39c2034e0a86f8e30d61df4f19c11960502c8cabeabe0dbf312452669dcaad40b0f9d06a0724aa64acf52d0f0c819ca1534e6ed6ce2b014093fa2387c9368da165114cf2553eb418d8c619a9fa9b0c996fef0863fd551fb7a754e2363a51ea2ee9809290833bc471084e12a08addd60024fb542f1c35136ac2", 0xe3}], 0x2, &(0x7f0000001100)=[{0x18, 0x108, 0xffffff7f, "3ed8"}, {0x1010, 0x0, 0x6, "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"}], 0x1028}}], 0x4, 0x24004040) (async) 23:56:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x11000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xc8, r4, 0x4d5eb8b605b04fd5, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc0, 0x54}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x3}, {0x80, 0x2}, {0x8, 0x1}, {0x3f, 0x1}, {0x1, 0x6}, {0x2, 0x6}], "8fe6cfa5b52b0743"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x5}, {0xff, 0x2}, {0x20, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x9, 0x7}, {0x5, 0x2}, {0xe0, 0x7}, {0x1, 0x4}, {0xaa, 0x2}, {0x0, 0x7}, {0x9, 0x1}, {0x5, 0x6}, {0x7f, 0xa0}, {0x8, 0x7}, {0x4}], "63c612fb35501403"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x40, 0x3}, {0x37, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x3f, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x40, 0x2}], "760b80330a987ed7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6e}, {0x3, 0x7}, {0xe9}, {0x80, 0x1}, {0x1, 0x7}, {0xff, 0x2}, {0x32, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x8, 0x6}, {0x5, 0x4}], "097f8d0b0e14aabf"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x80}, {0x1}, {0x4, 0x3}], "5a2b09ab52283310"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0xc000) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000340)="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", 0x1ba, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) signalfd4(r6, &(0x7f0000000180)={[0x800]}, 0x8, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_merged\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) pipe(&(0x7f0000000200)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0xc8, r4, 0x4d5eb8b605b04fd5, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffc0, 0x54}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x9, 0x3}, {0x80, 0x2}, {0x8, 0x1}, {0x3f, 0x1}, {0x1, 0x6}, {0x2, 0x6}], "8fe6cfa5b52b0743"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x4, 0x5}, {0xff, 0x2}, {0x20, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x6, 0x3}, {0x9, 0x7}, {0x5, 0x2}, {0xe0, 0x7}, {0x1, 0x4}, {0xaa, 0x2}, {0x0, 0x7}, {0x9, 0x1}, {0x5, 0x6}, {0x7f, 0xa0}, {0x8, 0x7}, {0x4}], "63c612fb35501403"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x40, 0x3}, {0x37, 0x5}, {0x3, 0x2}, {0x7, 0x2}, {0x3f, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x3}, {0x40, 0x2}], "760b80330a987ed7"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x6e}, {0x3, 0x7}, {0xe9}, {0x80, 0x1}, {0x1, 0x7}, {0xff, 0x2}, {0x32, 0x6}, {0x0, 0x6}, {0x6, 0x1}, {0x4, 0x4}, {0x8, 0x6}, {0x5, 0x4}], "097f8d0b0e14aabf"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x80}, {0x1}, {0x4, 0x3}], "5a2b09ab52283310"}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000340)="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", 0x1ba, 0x1, 0x0, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) signalfd4(r6, &(0x7f0000000180)={[0x800]}, 0x8, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000080)) (async) 23:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x31, 0x915c9eae630a74bc, 0x70bd26, 0x25dfdbfb, {0x1d}, [@generic="83bd68e737c293f6d3ec961e51808eaadbe6a4d7f7afacbbc92018d7ac37435320ca", @generic="18be4a7a25e23d1f543aff6bbcf3af5a17c7895e2ab06eabc8731aee06169ff596421733b460c85688c1b6a997005a6844dfebf0b72558e6836316183d634fde3b929b5053eb63e1c005f2ae2f52b41e3b9d1bf14bd460abbe537b5120dc6572d29ea8f327adaf6bd790afd4092a8ae34a667f2e8ff32ec5a1abab52f777dfd14647fad82c976571be7c3aed629ffbbb995caf1f2273b1aa52e99ec0443f5d4c78514c3cf62ed8d18dd0159192fa513bf4386de41a0caa0a026e7df021ffc08d02010881a096ca4a0b5a69c32dcf74652c7767c4"]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x60000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002240)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9768f4d7020d09314d85aaa8dab8", 0xe}, {&(0x7f0000000280)="4d201ffdcfb0168e07e0e0b4d2061a0e841b680ac37faaf2bee9991718125b07826115b320d0797edde8bda613256293e7f3d60fae996c87129b58ab3d8bb6b8b56aeb6e24e70ad639b05a0421e07e7df7b8a808ca1ac1fc1d87d48051b6383d9bc72ea3e7bb57a7b6f478547ac773677c3587fae0e70c96052375f870f6a67fce7f84eea53166d762bfd1a04e96d675e6ed8225", 0x94}, {&(0x7f0000000340)="5256f3279129337631592de335c9784dd3e5e8cadf4ddf1a8efbcab580e61536de811fd68514229b6e0388c0bc5597f910f3cf5bafa1d15e348d951c807ad25a3939816b5777c155a12bf350bde093a59b9eacde03a4cee8d3620997808cceca5c2b5c17a171203b87dedee8f40869d3ee7ae21c0185004c08ea4cf08dfe", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="1dc773b0f16b37ceaa8c6c8462e71b0dff5386d41042546b3732600fb2c08d9b805698ae831c2454f410dbbc946c113e2f6cc57f52", 0x35}, {&(0x7f0000000440)="b4d6bd30c94c36b4311187af584b1d9ab31de8ce7c70e62c12b0a923f09514052af4238739703f0b3bb40b01c98f1074d9a46f0323", 0x35}, {&(0x7f0000000480)="47fc413d1f8714b0cbec13efbec7b33c4c4cb9d258f022ef2c8fb1752346374ab862aaad4a10271d9454caed7ccdbcad08e8b05b41a97056bea3c32352618bb3e515dc75b49f5024723d53370623", 0x4e}, {&(0x7f0000000500)="a9b323afb3ae16741df92197334b2679998b31781411e5", 0x17}, {&(0x7f0000000540)="4e4285cf33bfc9ae5a4d607276cfb8b8b1715ac82933e99aab6a217bc052f45a519c6af55045af3a6d69e855cd49f01030a90314cb7a23b45aaa31e6302fc37cb51d7882e093be1e1de55232615ce4b6f3f989db09778eed00a35b1f325d265e60673d46ca68830113a072771de6ca64c511a90009bb4b200bcac155e0195d0fa7b71588ff3f6db7", 0x88}], 0x5, &(0x7f0000000680)=[{0x58, 0x113, 0xc16, "f3f49f9fbe0e462c819e7c6623dafeb5f6a70af63897d5c24ca018ccd51ccbc9b18b01f9ec09ee8ccefdf8c78901f09f467579b40ed8ebfc80e2f52236757c4f2c90c8a4503dca3a"}], 0x58}}, {{&(0x7f0000000700)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="56d915b5f6d7c499a3ee1f991031d994b3f2705014bfc5755aefcae55f5b49db5e3e8f6d370c641c13da57aa2502e1598b05963ad048e0dc4cce589e342bded0584c044e21f81a9722a4e4c8038668cf9fa42a4ab2145a8b8dd0c4e04efaeec6c4d55f1a61fc7b27af7c9281267dd3be2f2741e150102a4d29b316ccdf8b50279b3014d842843ecbcab58ceb5f91007588ccb49b8016de1ed02ffc11770290ff6d86e1728ed3228752c642c76dd971816836b325c1fd9297aaca4ccb0f19f494cfe903c1eeb0bb9690a07d0870f540aa0f55068c98d7cdfde6a37a22fda99cac0af2bc083fe325d939aa148fdb8a7fde02fc7235f1", 0xf5}, {&(0x7f0000000880)="eb807e19bca13c7ef5adce5e842c17a2f8eac9b43309e959e16ac8d47daa1311e65cc1778a33210624646893964c097dd7059d15f58778de30282c0c3bf3ba6d04c336995396599ffc4f28e99c5cfbc6f228440c3d844f500eab840a71", 0x5d}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x598}}, {{&(0x7f0000000f00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106-gcm-aesni)\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f80)="ec9ae429ab931743950ed6cd635971083027fa408b4c3359c6d46ca03aac43ce06548aa8270cc72e87ac9adea4bc", 0x2e}, {&(0x7f0000000fc0)="ed7b933cb8b92957a26ec195b500b14ea602c33de1b4f1952dc366d21af64d9e7833d6fa47db727a156b16987c13aac5a7d14983ebdae473dfb1822f60580a82ca7069cbc6d22ee615c3a28b011a98938d27f6762070ea08cd93531d90c2cbce0bb1997036ff81350beb39c2034e0a86f8e30d61df4f19c11960502c8cabeabe0dbf312452669dcaad40b0f9d06a0724aa64acf52d0f0c819ca1534e6ed6ce2b014093fa2387c9368da165114cf2553eb418d8c619a9fa9b0c996fef0863fd551fb7a754e2363a51ea2ee9809290833bc471084e12a08addd60024fb542f1c35136ac2", 0xe3}], 0x2, &(0x7f0000001100)=[{0x18, 0x108, 0xffffff7f, "3ed8"}, {0x1010, 0x0, 0x6, "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"}], 0x1028}}], 0x4, 0x24004040) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x400}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002240)='nv\x00', 0x3) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) sendmmsg(r0, &(0x7f0000002140)=[{{&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="9768f4d7020d09314d85aaa8dab8", 0xe}, {&(0x7f0000000280)="4d201ffdcfb0168e07e0e0b4d2061a0e841b680ac37faaf2bee9991718125b07826115b320d0797edde8bda613256293e7f3d60fae996c87129b58ab3d8bb6b8b56aeb6e24e70ad639b05a0421e07e7df7b8a808ca1ac1fc1d87d48051b6383d9bc72ea3e7bb57a7b6f478547ac773677c3587fae0e70c96052375f870f6a67fce7f84eea53166d762bfd1a04e96d675e6ed8225", 0x94}, {&(0x7f0000000340)="5256f3279129337631592de335c9784dd3e5e8cadf4ddf1a8efbcab580e61536de811fd68514229b6e0388c0bc5597f910f3cf5bafa1d15e348d951c807ad25a3939816b5777c155a12bf350bde093a59b9eacde03a4cee8d3620997808cceca5c2b5c17a171203b87dedee8f40869d3ee7ae21c0185004c08ea4cf08dfe", 0x7e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="1dc773b0f16b37ceaa8c6c8462e71b0dff5386d41042546b3732600fb2c08d9b805698ae831c2454f410dbbc946c113e2f6cc57f52", 0x35}, {&(0x7f0000000440)="b4d6bd30c94c36b4311187af584b1d9ab31de8ce7c70e62c12b0a923f09514052af4238739703f0b3bb40b01c98f1074d9a46f0323", 0x35}, {&(0x7f0000000480)="47fc413d1f8714b0cbec13efbec7b33c4c4cb9d258f022ef2c8fb1752346374ab862aaad4a10271d9454caed7ccdbcad08e8b05b41a97056bea3c32352618bb3e515dc75b49f5024723d53370623", 0x4e}, {&(0x7f0000000500)="a9b323afb3ae16741df92197334b2679998b31781411e5", 0x17}, {&(0x7f0000000540)="4e4285cf33bfc9ae5a4d607276cfb8b8b1715ac82933e99aab6a217bc052f45a519c6af55045af3a6d69e855cd49f01030a90314cb7a23b45aaa31e6302fc37cb51d7882e093be1e1de55232615ce4b6f3f989db09778eed00a35b1f325d265e60673d46ca68830113a072771de6ca64c511a90009bb4b200bcac155e0195d0fa7b71588ff3f6db7", 0x88}], 0x5, &(0x7f0000000680)=[{0x58, 0x113, 0xc16, "f3f49f9fbe0e462c819e7c6623dafeb5f6a70af63897d5c24ca018ccd51ccbc9b18b01f9ec09ee8ccefdf8c78901f09f467579b40ed8ebfc80e2f52236757c4f2c90c8a4503dca3a"}], 0x58}}, {{&(0x7f0000000700)=@nl=@kern={0x10, 0x0, 0x0, 0x20000000}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)="56d915b5f6d7c499a3ee1f991031d994b3f2705014bfc5755aefcae55f5b49db5e3e8f6d370c641c13da57aa2502e1598b05963ad048e0dc4cce589e342bded0584c044e21f81a9722a4e4c8038668cf9fa42a4ab2145a8b8dd0c4e04efaeec6c4d55f1a61fc7b27af7c9281267dd3be2f2741e150102a4d29b316ccdf8b50279b3014d842843ecbcab58ceb5f91007588ccb49b8016de1ed02ffc11770290ff6d86e1728ed3228752c642c76dd971816836b325c1fd9297aaca4ccb0f19f494cfe903c1eeb0bb9690a07d0870f540aa0f55068c98d7cdfde6a37a22fda99cac0af2bc083fe325d939aa148fdb8a7fde02fc7235f1", 0xf5}, {&(0x7f0000000880)="eb807e19bca13c7ef5adce5e842c17a2f8eac9b43309e959e16ac8d47daa1311e65cc1778a33210624646893964c097dd7059d15f58778de30282c0c3bf3ba6d04c336995396599ffc4f28e99c5cfbc6f228440c3d844f500eab840a71", 0x5d}], 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x598}}, {{&(0x7f0000000f00)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106-gcm-aesni)\x00'}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f80)="ec9ae429ab931743950ed6cd635971083027fa408b4c3359c6d46ca03aac43ce06548aa8270cc72e87ac9adea4bc", 0x2e}, {&(0x7f0000000fc0)="ed7b933cb8b92957a26ec195b500b14ea602c33de1b4f1952dc366d21af64d9e7833d6fa47db727a156b16987c13aac5a7d14983ebdae473dfb1822f60580a82ca7069cbc6d22ee615c3a28b011a98938d27f6762070ea08cd93531d90c2cbce0bb1997036ff81350beb39c2034e0a86f8e30d61df4f19c11960502c8cabeabe0dbf312452669dcaad40b0f9d06a0724aa64acf52d0f0c819ca1534e6ed6ce2b014093fa2387c9368da165114cf2553eb418d8c619a9fa9b0c996fef0863fd551fb7a754e2363a51ea2ee9809290833bc471084e12a08addd60024fb542f1c35136ac2", 0xe3}], 0x2, &(0x7f0000001100)=[{0x18, 0x108, 0xffffff7f, "3ed8"}, {0x1010, 0x0, 0x6, "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"}], 0x1028}}], 0x4, 0x24004040) (async) [ 790.864576][T29204] binder: 29195:29204 ioctl c0306201 20001480 returned -14 23:56:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc000000a6a8446168fa247b35a7e739e0a376d5b1e9c4447c941dee6201000000000000007a98f9a0d2c99f6291e6cf3166274779860d8efbc2d9cfb4c3aae27e27ef9f986d937fb6836df9b6be03309c57df6a2e84406086ba82838a95712b21d0ee41963b69ae32cc0b6192a43a09cd8b30bcf7ae93c088fc02c9a6ee683000642741218dd5db6d770da695ddb61c48ea15fd9400ded12c8a7d2a9fcbe39a5d", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000019a1caef0000588d272b26cabbd517e58f81f7dd985256db8783aa4c7c4762a934fed6c6f0fd5d706b"], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="9b17040400", 0x3d) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='tunl0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) connect(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r3, 0x4, 0x80, 0x8, 0x5, 0x4, @mcast1, @empty, 0x1, 0x20, 0x2, 0x400}}) 23:56:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f408, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x7f, 0x8}, 0x0, 0x32b5101e, 0x0, {0x4, 0x9}, 0x4e, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x31, 0x915c9eae630a74bc, 0x70bd26, 0x25dfdbfb, {0x1d}, [@generic="83bd68e737c293f6d3ec961e51808eaadbe6a4d7f7afacbbc92018d7ac37435320ca", @generic="18be4a7a25e23d1f543aff6bbcf3af5a17c7895e2ab06eabc8731aee06169ff596421733b460c85688c1b6a997005a6844dfebf0b72558e6836316183d634fde3b929b5053eb63e1c005f2ae2f52b41e3b9d1bf14bd460abbe537b5120dc6572d29ea8f327adaf6bd790afd4092a8ae34a667f2e8ff32ec5a1abab52f777dfd14647fad82c976571be7c3aed629ffbbb995caf1f2273b1aa52e99ec0443f5d4c78514c3cf62ed8d18dd0159192fa513bf4386de41a0caa0a026e7df021ffc08d02010881a096ca4a0b5a69c32dcf74652c7767c4"]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x31, 0x915c9eae630a74bc, 0x70bd26, 0x25dfdbfb, {0x1d}, [@generic="83bd68e737c293f6d3ec961e51808eaadbe6a4d7f7afacbbc92018d7ac37435320ca", @generic="18be4a7a25e23d1f543aff6bbcf3af5a17c7895e2ab06eabc8731aee06169ff596421733b460c85688c1b6a997005a6844dfebf0b72558e6836316183d634fde3b929b5053eb63e1c005f2ae2f52b41e3b9d1bf14bd460abbe537b5120dc6572d29ea8f327adaf6bd790afd4092a8ae34a667f2e8ff32ec5a1abab52f777dfd14647fad82c976571be7c3aed629ffbbb995caf1f2273b1aa52e99ec0443f5d4c78514c3cf62ed8d18dd0159192fa513bf4386de41a0caa0a026e7df021ffc08d02010881a096ca4a0b5a69c32dcf74652c7767c4"]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:56:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc000000a6a8446168fa247b35a7e739e0a376d5b1e9c4447c941dee6201000000000000007a98f9a0d2c99f6291e6cf3166274779860d8efbc2d9cfb4c3aae27e27ef9f986d937fb6836df9b6be03309c57df6a2e84406086ba82838a95712b21d0ee41963b69ae32cc0b6192a43a09cd8b30bcf7ae93c088fc02c9a6ee683000642741218dd5db6d770da695ddb61c48ea15fd9400ded12c8a7d2a9fcbe39a5d", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000019a1caef0000588d272b26cabbd517e58f81f7dd985256db8783aa4c7c4762a934fed6c6f0fd5d706b"], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="9b17040400", 0x3d) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='tunl0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) (async) connect(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r3, 0x4, 0x80, 0x8, 0x5, 0x4, @mcast1, @empty, 0x1, 0x20, 0x2, 0x400}}) [ 791.082701][T29232] binder: 29230:29232 ioctl c0306201 20001480 returned -14 23:56:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x65580000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa0800}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, 0x31, 0x915c9eae630a74bc, 0x70bd26, 0x25dfdbfb, {0x1d}, [@generic="83bd68e737c293f6d3ec961e51808eaadbe6a4d7f7afacbbc92018d7ac37435320ca", @generic="18be4a7a25e23d1f543aff6bbcf3af5a17c7895e2ab06eabc8731aee06169ff596421733b460c85688c1b6a997005a6844dfebf0b72558e6836316183d634fde3b929b5053eb63e1c005f2ae2f52b41e3b9d1bf14bd460abbe537b5120dc6572d29ea8f327adaf6bd790afd4092a8ae34a667f2e8ff32ec5a1abab52f777dfd14647fad82c976571be7c3aed629ffbbb995caf1f2273b1aa52e99ec0443f5d4c78514c3cf62ed8d18dd0159192fa513bf4386de41a0caa0a026e7df021ffc08d02010881a096ca4a0b5a69c32dcf74652c7767c4"]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="cc000000a6a8446168fa247b35a7e739e0a376d5b1e9c4447c941dee6201000000000000007a98f9a0d2c99f6291e6cf3166274779860d8efbc2d9cfb4c3aae27e27ef9f986d937fb6836df9b6be03309c57df6a2e84406086ba82838a95712b21d0ee41963b69ae32cc0b6192a43a09cd8b30bcf7ae93c088fc02c9a6ee683000642741218dd5db6d770da695ddb61c48ea15fd9400ded12c8a7d2a9fcbe39a5d", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000019a1caef0000588d272b26cabbd517e58f81f7dd985256db8783aa4c7c4762a934fed6c6f0fd5d706b"], 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="9b17040400", 0x3d) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='tunl0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xb8, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x17}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) (async) connect(r0, &(0x7f0000000200)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) (async) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) (async) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f9, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', r3, 0x4, 0x80, 0x8, 0x5, 0x4, @mcast1, @empty, 0x1, 0x20, 0x2, 0x400}}) [ 791.268330][T29253] binder: 29245:29253 ioctl c0306201 20001480 returned -14 23:56:58 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x68070000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:58 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:58 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x1000, 0x4) connect(r0, &(0x7f0000000200)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x80) [ 791.375650][T29272] binder: 29266:29272 ioctl c0306201 20001480 returned -14 [ 791.462598][T29274] binder: 29273:29274 ioctl c0306201 20001480 returned -14 23:56:59 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000800000000727200"], 0x2c}}, 0x0) flock(r2, 0x1) flock(r1, 0x2) close(r1) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$FIOCLEX(r6, 0x5451) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:56:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x81000000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xusbatm', 0x400041, 0xd4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x49}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmmsg$unix(r2, &(0x7f0000006980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/188, 0xbc}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/110, 0x6e}, {&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/90, 0x5a}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001700), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/247, 0xf7}], 0x3}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/90, 0x5a}, {&(0x7f0000001b00)=""/235, 0xeb}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/58, 0x3a}, {&(0x7f0000001cc0)=""/115, 0x73}, {&(0x7f0000001d40)=""/155, 0x9b}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/136, 0x88}, {&(0x7f0000001fc0)=""/33, 0x21}, {&(0x7f0000002000)=""/35, 0x23}, {&(0x7f0000002040)=""/238, 0xee}, {&(0x7f0000002140)=""/232, 0xe8}, {&(0x7f0000002240)=""/187, 0xbb}, {&(0x7f0000002300)=""/29, 0x1d}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/8, 0x8}], 0x9, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000034c0), 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003540)=""/70, 0x46}, {&(0x7f00000035c0)=""/71, 0x47}, {&(0x7f0000003640)=""/222, 0xde}, {&(0x7f0000003740)=""/143, 0x8f}, {&(0x7f0000003800)=""/159, 0x9f}], 0x5, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/223, 0xdf}], 0x1, &(0x7f0000003b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000004180)=[{&(0x7f0000003c80)=""/191, 0xbf}, {&(0x7f0000003d40)=""/28, 0x1c}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/252, 0xfc}, {&(0x7f0000003f40)=""/170, 0xaa}, {&(0x7f0000004000)=""/95, 0x5f}, {&(0x7f0000004080)=""/235, 0xeb}], 0x7}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004280)=""/160, 0xa0}, {&(0x7f0000004340)=""/127, 0x7f}, {&(0x7f00000043c0)=""/180, 0xb4}], 0x3, &(0x7f00000044c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004500)=@abs, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/200, 0xc8}, {&(0x7f0000005680)=""/177, 0xb1}, {&(0x7f0000005740)=""/41, 0x29}, {&(0x7f0000005780)=""/183, 0xb7}, {&(0x7f0000005840)=""/72, 0x48}, {&(0x7f00000058c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006940)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40000100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:56:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:56:59 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x1000, 0x4) connect(r0, &(0x7f0000000200)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x80) 23:56:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:59 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x88a8ffff, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:56:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xusbatm', 0x400041, 0xd4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x49}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmmsg$unix(r2, &(0x7f0000006980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/188, 0xbc}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/110, 0x6e}, {&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/90, 0x5a}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001700), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/247, 0xf7}], 0x3}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/90, 0x5a}, {&(0x7f0000001b00)=""/235, 0xeb}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/58, 0x3a}, {&(0x7f0000001cc0)=""/115, 0x73}, {&(0x7f0000001d40)=""/155, 0x9b}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/136, 0x88}, {&(0x7f0000001fc0)=""/33, 0x21}, {&(0x7f0000002000)=""/35, 0x23}, {&(0x7f0000002040)=""/238, 0xee}, {&(0x7f0000002140)=""/232, 0xe8}, {&(0x7f0000002240)=""/187, 0xbb}, {&(0x7f0000002300)=""/29, 0x1d}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/8, 0x8}], 0x9, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000034c0), 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003540)=""/70, 0x46}, {&(0x7f00000035c0)=""/71, 0x47}, {&(0x7f0000003640)=""/222, 0xde}, {&(0x7f0000003740)=""/143, 0x8f}, {&(0x7f0000003800)=""/159, 0x9f}], 0x5, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/223, 0xdf}], 0x1, &(0x7f0000003b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000004180)=[{&(0x7f0000003c80)=""/191, 0xbf}, {&(0x7f0000003d40)=""/28, 0x1c}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/252, 0xfc}, {&(0x7f0000003f40)=""/170, 0xaa}, {&(0x7f0000004000)=""/95, 0x5f}, {&(0x7f0000004080)=""/235, 0xeb}], 0x7}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004280)=""/160, 0xa0}, {&(0x7f0000004340)=""/127, 0x7f}, {&(0x7f00000043c0)=""/180, 0xb4}], 0x3, &(0x7f00000044c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004500)=@abs, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/200, 0xc8}, {&(0x7f0000005680)=""/177, 0xb1}, {&(0x7f0000005740)=""/41, 0x29}, {&(0x7f0000005780)=""/183, 0xb7}, {&(0x7f0000005840)=""/72, 0x48}, {&(0x7f00000058c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006940)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40000100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xusbatm', 0x400041, 0xd4) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x49}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) recvmmsg$unix(r2, &(0x7f0000006980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/188, 0xbc}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/110, 0x6e}, {&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/90, 0x5a}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001700), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/247, 0xf7}], 0x3}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/90, 0x5a}, {&(0x7f0000001b00)=""/235, 0xeb}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/58, 0x3a}, {&(0x7f0000001cc0)=""/115, 0x73}, {&(0x7f0000001d40)=""/155, 0x9b}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/136, 0x88}, {&(0x7f0000001fc0)=""/33, 0x21}, {&(0x7f0000002000)=""/35, 0x23}, {&(0x7f0000002040)=""/238, 0xee}, {&(0x7f0000002140)=""/232, 0xe8}, {&(0x7f0000002240)=""/187, 0xbb}, {&(0x7f0000002300)=""/29, 0x1d}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/8, 0x8}], 0x9, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000034c0), 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003540)=""/70, 0x46}, {&(0x7f00000035c0)=""/71, 0x47}, {&(0x7f0000003640)=""/222, 0xde}, {&(0x7f0000003740)=""/143, 0x8f}, {&(0x7f0000003800)=""/159, 0x9f}], 0x5, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/223, 0xdf}], 0x1, &(0x7f0000003b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000004180)=[{&(0x7f0000003c80)=""/191, 0xbf}, {&(0x7f0000003d40)=""/28, 0x1c}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/252, 0xfc}, {&(0x7f0000003f40)=""/170, 0xaa}, {&(0x7f0000004000)=""/95, 0x5f}, {&(0x7f0000004080)=""/235, 0xeb}], 0x7}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004280)=""/160, 0xa0}, {&(0x7f0000004340)=""/127, 0x7f}, {&(0x7f00000043c0)=""/180, 0xb4}], 0x3, &(0x7f00000044c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004500)=@abs, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/200, 0xc8}, {&(0x7f0000005680)=""/177, 0xb1}, {&(0x7f0000005740)=""/41, 0x29}, {&(0x7f0000005780)=""/183, 0xb7}, {&(0x7f0000005840)=""/72, 0x48}, {&(0x7f00000058c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006940)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40000100, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:56:59 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0x1000, 0x4) (async) connect(r0, &(0x7f0000000200)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x80) 23:56:59 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:56:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/xusbatm', 0x400041, 0xd4) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x49}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmmsg$unix(r2, &(0x7f0000006980)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000200)=""/112, 0x70}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/188, 0xbc}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/110, 0x6e}, {&(0x7f00000014c0)=""/195, 0xc3}, {&(0x7f00000015c0)=""/90, 0x5a}], 0x7, &(0x7f00000016c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001700), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001780)=""/179, 0xb3}, {&(0x7f0000001840)=""/69, 0x45}, {&(0x7f00000018c0)=""/247, 0xf7}], 0x3}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/90, 0x5a}, {&(0x7f0000001b00)=""/235, 0xeb}, {&(0x7f0000001c00)=""/120, 0x78}, {&(0x7f0000001c80)=""/58, 0x3a}, {&(0x7f0000001cc0)=""/115, 0x73}, {&(0x7f0000001d40)=""/155, 0x9b}], 0x6, &(0x7f0000001e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f00)=""/136, 0x88}, {&(0x7f0000001fc0)=""/33, 0x21}, {&(0x7f0000002000)=""/35, 0x23}, {&(0x7f0000002040)=""/238, 0xee}, {&(0x7f0000002140)=""/232, 0xe8}, {&(0x7f0000002240)=""/187, 0xbb}, {&(0x7f0000002300)=""/29, 0x1d}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/8, 0x8}], 0x9, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f00000034c0), 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003540)=""/70, 0x46}, {&(0x7f00000035c0)=""/71, 0x47}, {&(0x7f0000003640)=""/222, 0xde}, {&(0x7f0000003740)=""/143, 0x8f}, {&(0x7f0000003800)=""/159, 0x9f}], 0x5, &(0x7f0000003940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f00000039c0), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000003a40)=""/223, 0xdf}], 0x1, &(0x7f0000003b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000003c00), 0x6e, &(0x7f0000004180)=[{&(0x7f0000003c80)=""/191, 0xbf}, {&(0x7f0000003d40)=""/28, 0x1c}, {&(0x7f0000003d80)=""/166, 0xa6}, {&(0x7f0000003e40)=""/252, 0xfc}, {&(0x7f0000003f40)=""/170, 0xaa}, {&(0x7f0000004000)=""/95, 0x5f}, {&(0x7f0000004080)=""/235, 0xeb}], 0x7}}, {{&(0x7f0000004200)=@abs, 0x6e, &(0x7f0000004480)=[{&(0x7f0000004280)=""/160, 0xa0}, {&(0x7f0000004340)=""/127, 0x7f}, {&(0x7f00000043c0)=""/180, 0xb4}], 0x3, &(0x7f00000044c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004500)=@abs, 0x6e, &(0x7f00000068c0)=[{&(0x7f0000004580)=""/4096, 0x1000}, {&(0x7f0000005580)=""/200, 0xc8}, {&(0x7f0000005680)=""/177, 0xb1}, {&(0x7f0000005740)=""/41, 0x29}, {&(0x7f0000005780)=""/183, 0xb7}, {&(0x7f0000005840)=""/72, 0x48}, {&(0x7f00000058c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006940)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40000100, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 792.173754][T29295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 23:57:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x5) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000800000000727200"], 0x2c}}, 0x0) flock(r2, 0x1) flock(r1, 0x2) (async, rerun: 64) close(r1) (async, rerun: 64) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$FIOCLEX(r6, 0x5451) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:57:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) close_range(r0, r4, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41030000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6, 0xfffb}, {0x9, 0xd}, {0x7, 0xd}}, [{0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffffff7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:57:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x1411, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008850) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="08000000f1ffffff000000000800011005ac78006c4bc8f95f99997aedc862e651bbcbf579fb2a59a95d31f99d52d0ed0878830af78b05b21beb145f86a19abfc255fb3c26c55b9e532e890f64ea89a5530405057f81352de3abf852d1964aa0fd897f27b6ef77c645"], 0x2c}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10b, 0x9, 0x80, 0x328, 0x68, 0x2, 0x384, 0x2}, "16321959b6ec7d71857212d706be207f47c7833ef8c4a0d22643d64e877d41ecd7d63fbba3802c25386aa040a26cf2782e082d0c9e77a68ecdacf7828f915679e58a0cff5911d886e26465c097bc07dc3ce1400306952d3e680d7241618f4c06d623c07bf0704b1b5a0632792b20d8bc4c952c80f4a7ec6b55560cea3258fa8d49cb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a2) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="c6d7b24d321c401923350eabd81ede0a31ddbc8a0918b3e9ae3579d8feb43ff4e2aa4ae56adbd84ef806962830d0118a2f75699b2206600c7dc759f7d03567dfc724d0a89860860a48b7a0a331954ddb9f2e729718ad985a02a6aa35758799ed2924f6ec32a6388f1df9c6c1897819a38774e4b2a6e74f47dcff210fd9cf7980e389f66c7bf410c46ddeb8ec990d53f3b5f13580519cd81fc7c871b95ccfa4b4c03b1a891e1c98617680ed9c8d776f76b2183ac310e54af8f7aaab385d8d37751b66a0ce45949312", 0xc8, 0x20000001, &(0x7f0000000e40)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r5, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x9effffff, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 793.000495][T29329] binder: 29327:29329 ioctl c0306201 0 returned -14 [ 793.000881][T29328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.036717][T29331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 793.090814][T29328] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:00 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000800000000727200"], 0x2c}}, 0x0) (rerun: 32) flock(r2, 0x1) (async) flock(r1, 0x2) (async) close(r1) (async) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) ioctl$FIOCLEX(r6, 0x5451) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23:57:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) close_range(r0, r4, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41030000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6, 0xfffb}, {0x9, 0xd}, {0x7, 0xd}}, [{0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffffff7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:57:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfcffffff, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x1411, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008850) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="08000000f1ffffff000000000800011005ac78006c4bc8f95f99997aedc862e651bbcbf579fb2a59a95d31f99d52d0ed0878830af78b05b21beb145f86a19abfc255fb3c26c55b9e532e890f64ea89a5530405057f81352de3abf852d1964aa0fd897f27b6ef77c645"], 0x2c}}, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10b, 0x9, 0x80, 0x328, 0x68, 0x2, 0x384, 0x2}, "16321959b6ec7d71857212d706be207f47c7833ef8c4a0d22643d64e877d41ecd7d63fbba3802c25386aa040a26cf2782e082d0c9e77a68ecdacf7828f915679e58a0cff5911d886e26465c097bc07dc3ce1400306952d3e680d7241618f4c06d623c07bf0704b1b5a0632792b20d8bc4c952c80f4a7ec6b55560cea3258fa8d49cb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a2) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="c6d7b24d321c401923350eabd81ede0a31ddbc8a0918b3e9ae3579d8feb43ff4e2aa4ae56adbd84ef806962830d0118a2f75699b2206600c7dc759f7d03567dfc724d0a89860860a48b7a0a331954ddb9f2e729718ad985a02a6aa35758799ed2924f6ec32a6388f1df9c6c1897819a38774e4b2a6e74f47dcff210fd9cf7980e389f66c7bf410c46ddeb8ec990d53f3b5f13580519cd81fc7c871b95ccfa4b4c03b1a891e1c98617680ed9c8d776f76b2183ac310e54af8f7aaab385d8d37751b66a0ce45949312", 0xc8, 0x20000001, &(0x7f0000000e40)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r5, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 793.131307][T29339] binder: 29336:29339 ioctl c0306201 0 returned -14 23:57:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x38, 0x1411, 0x10, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008850) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="08000000f1ffffff000000000800011005ac78006c4bc8f95f99997aedc862e651bbcbf579fb2a59a95d31f99d52d0ed0878830af78b05b21beb145f86a19abfc255fb3c26c55b9e532e890f64ea89a5530405057f81352de3abf852d1964aa0fd897f27b6ef77c645"], 0x2c}}, 0x0) (async, rerun: 64) write$binfmt_aout(r0, &(0x7f0000000280)={{0x10b, 0x9, 0x80, 0x328, 0x68, 0x2, 0x384, 0x2}, "16321959b6ec7d71857212d706be207f47c7833ef8c4a0d22643d64e877d41ecd7d63fbba3802c25386aa040a26cf2782e082d0c9e77a68ecdacf7828f915679e58a0cff5911d886e26465c097bc07dc3ce1400306952d3e680d7241618f4c06d623c07bf0704b1b5a0632792b20d8bc4c952c80f4a7ec6b55560cea3258fa8d49cb", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a2) (async) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="c6d7b24d321c401923350eabd81ede0a31ddbc8a0918b3e9ae3579d8feb43ff4e2aa4ae56adbd84ef806962830d0118a2f75699b2206600c7dc759f7d03567dfc724d0a89860860a48b7a0a331954ddb9f2e729718ad985a02a6aa35758799ed2924f6ec32a6388f1df9c6c1897819a38774e4b2a6e74f47dcff210fd9cf7980e389f66c7bf410c46ddeb8ec990d53f3b5f13580519cd81fc7c871b95ccfa4b4c03b1a891e1c98617680ed9c8d776f76b2183ac310e54af8f7aaab385d8d37751b66a0ce45949312", 0xc8, 0x20000001, &(0x7f0000000e40)={0x2, 0x4e21, @multicast2}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async, rerun: 64) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r5, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 793.277095][T29353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.296233][T29356] binder: 29349:29356 ioctl c0306201 0 returned -14 23:57:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffa888, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) close_range(r0, r4, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x41030000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x6, 0xfffb}, {0x9, 0xd}, {0x7, 0xd}}, [{0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xfffffff7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 23:57:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:00 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) connect(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xc8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001) accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) 23:57:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 793.471599][T29373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:00 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffff000, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:00 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 793.596905][T29373] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 793.672570][T29390] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 793.689798][T29395] binder: BINDER_SET_CONTEXT_MGR already set [ 793.689810][T29395] binder: 29394:29395 ioctl 40046207 0 returned -16 23:57:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="08657402e8c015242b9d22232d4a0a10abd749655106d7cb7a592637b15c137b4400f0f5621fca00eb1f250bcaf299697aea91d1606a102790ecff011239a11f6fba01a7bd84fa381b7bbb8c1553447f4b9a131f2f1894f45c07f1134c5c4c6abe7631b4aa98b7fbdbbe734c60f7d6aa0cc40cf0a0cc32071fd717a395eb9e443946dcc5bb46c1de147973c8a76fd1bad5d5bef8d9174701716d13e4c501bd452629daad00000000aeef66183a4b5ef2c8d05b0e6d3da81ce7e10ef37c6c63eedc4206561cbf50cadb68766590245c32fd66cd75e50e9c5068898737a295b1b25615aa479d390bc9b7bfa131d4b0530c355e828377385aa12feb60c13f773ca39c2c0e610eb272807f70cdd4d228fa3b9d2572830e3a6ef977c7fb0a79faabfec4a17d01e4d3ae8d90cebd0da2f969e0a8baf917c6a12764f8a7"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) connect(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xc8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) 23:57:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 23:57:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000008c0)) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x2000025f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x88}}], 0x1, 0x40) open(0x0, 0x0, 0x0) 23:57:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) connect(r0, &(0x7f0000000200)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xc8, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvtap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe6}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x15}}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) 23:57:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffff9e, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) 23:57:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffff0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 793.998557][T29418] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 23:57:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000008c0)) (async) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x2000025f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) (async) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x88}}], 0x1, 0x40) (async) open(0x0, 0x0, 0x0) 23:57:01 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xfffffffc, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:01 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x9}, 0x10000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1000, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 23:57:01 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0xffffffff, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:02 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x9}, 0x10000) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1000, @broadcast}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (rerun: 64) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 794.709229][T29447] binder: 29438:29447 ioctl c0306201 20001480 returned -14 [ 794.709661][T29447] binder_alloc: 29438: binder_alloc_buf, no vma 23:57:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x1, 0x2f, 0x0, 'queue1\x00', 0xe4}) 23:57:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="0f00000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 794.898783][T29463] binder: 29459:29463 ioctl c0306201 20001480 returned -14 [ 794.899159][T29463] binder_alloc: 29459: binder_alloc_buf, no vma [ 795.046138][T29469] binder: 29468:29469 ioctl c0306201 20001480 returned -14 [ 795.046485][T29469] binder_alloc: 29468: binder_alloc_buf, no vma 23:57:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r0, 0x0, 0x0) (async) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000008c0)) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='rcu_utilization\x00', r2}, 0x10) r3 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x2000025f}, {0x0, 0x84000000}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)=""/227, 0x7ffff000}, {0x0}], 0x2, 0x0) r4 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000480)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize}, {@blksize={'blksize', 0x3d, 0xe00}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@uid_lt={'uid<', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r4]}}], 0x88}}], 0x1, 0x40) (async) open(0x0, 0x0, 0x0) 23:57:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x1, 0x2f, 0x0, 'queue1\x00', 0xe4}) 23:57:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="1000000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:02 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="2300000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x1, 0x2f, 0x0, 'queue1\x00', 0xe4}) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) (async) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x1, 0x2f, 0x0, 'queue1\x00', 0xe4}) (async) [ 795.561029][T29478] binder: 29472:29478 ioctl c0306201 20001480 returned -14 23:57:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x9}, 0x10000) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1000, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/38, 0x26}, {&(0x7f0000000280)=""/238, 0xee}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000000680)=""/17, 0x11}, {&(0x7f00000006c0)=""/162, 0xa2}], 0x9}, 0x10000) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x1000, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) 23:57:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x9, 0x20, 0x5e, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40c1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="c000000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 795.744496][T29497] binder: 29496:29497 ioctl c0306201 20001480 returned -14 [ 795.768773][T29499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 795.891185][T29510] binder: 29500:29510 ioctl c0306201 20001480 returned -14 23:57:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="c00e000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x9, 0x20, 0x5e, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40c1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000001340)="13c932477e04d40e8f4449269a8cdd741e5185519d347823b4cfde1dab83171b56def3e674fc913244cc731c44d7ca89024ad98d222e9ba99cfef5a7519ad1d6c0506444510fbf717c808525b25a3ad3973eaaf9c9f59bba4245e110149a4293f37c59c6a954e0add85e69b18c41dff0e54319442099224d0e95f13b577ca6fe384cc2d5940dfdc6a6ec219d7816a508305a7a52a0f0f5f0", 0x98, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="2321202e2f66697c653020232f24280f2320402b217b0ace44a97e2f65f89eb4947cbba44e2a81a15b085233ea3f99de2eb07cee63163fd66a4003f4708f4d"], 0x3f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001400)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @multicast2}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x220, 0x7}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x1000, "0fa37c839b46ed83c9ecf614ce2f48622d53ec12f891c35db3692e4a6a36da16d81b41d21c9b7344c3324a6d89da0caed3f99b6f4c78d94fa67a51396ea83afa4db3721f7e4c5eced7ebd11c6e4695045ce6a9fa22a8f5dcd391a9ac24b9fb213be7adf184a330482e5a8bbc45f46353eb73b589299db85a9d6c677cf1f0fd6a31b2155a07c51253cee389ce3536cfbadc505b5e787a10ca8fa8500e1c3f359c2301da4d629c5c05d3e0e5b85afe7b87b5a7522d1f9f6271b5c265b3a3fded463cfdce3ca433d45b2b2ac8af47fc3dc9e530b741dfe128dc859aeaf657aa638385dacdea86597b3c8213a85d2a0bed5a9c594bc3c5da7fb2dbea2a7c568b1d42df4069e083ac830d405953978ce093806c0d681d009c2bc031567cc4d2dcd141cb0dfba60c0f5764851861d556fe73308757e255be0ac01e5f568676bd6ef4b943d8581ea9b45eca8e64f0ffa30827f1f6a63c7f6be2a691c344fc7c6a97586c34e3ce537218a49ef5cab6603aa07ef733f46e5408c1764f454097fb0b7e96a945c2073287b9cfe64bdf0465aa2631c13c85ff5a99fe85598fffb28c2af3b6f0a890b12540dbdad8cccbfb4f3468bc2370fe3e7d0d3db6d2ca8e6894f5840f41bc586cde378ad5b59fe65462e93dd492ef595b776715f3c4ec477a59d0f5dd115ed38ea892b7716b9e6f0c54ad5d9fe5cca13937ab32da6a25c09b0e5c465ea6d087729308773f773b2717c2d9786ae814b51627cfd03b5e6d66191732c01410e1984301a8a317fbf3680df553a50e9fd85711d1aa1138caddf7e2ac833a5d29df1d0e5bc6bd742ac96bdf3dc1d753f985ffe982927d86bea65ef5c61829c936947229d7c65965707dba58caabb2fa85bf21f6c6e5357558072315209614b7571375c78bf07c06398190ae21d6172c6aa3e13254ab610875619c19720de4217e75afa47da6f7cd5d44611c20d3bff713d7518bd4ce35b8ae6a757720093089f70a1ef0c2203d85e52c564bae8958d8fab472e1967befe4732106634553e6a8064504b4633d7a69c2a77616b090a0afb961b9320722a2810114ef7d2893e2f9c3e6a7ef9bd30737ad4b0b78f50dd7cd134e22b592326be9f43aa1dbbac0c6bfa7e5e3f1ba5aa32b668935156114708afa4199d922e3d07f9d95de5e64a0b6289479a641982a264dbadd86540cb87195f9832ae0d33545705014f3e735c9de1a3239efdf6c2f168ac718faf681a6aba93643fc902a74f11a97c7fa7f2aa67cf4c693bac703d63c99fb7069f96c1e09453eaef5ca8596b19a669007066b8fcad17043fbffdc08092b96da519bbc7b35d61724b12e10604d8891a141dd87b82b2b2cf7a5a5fdec73d4ae7820d6b2c08828bdec7973f884968ccb25c352562c20021dbdbca4684f4bd63052256c0d6c84a8e48b445f4d62c3d3f8c1590240a34790584a13de72e3fd7b4dcc0f3eb29050056ac12424fcd98ad9023cb4a06d7a1d188a6bbb00ec1c082088db8f04c4f79459ae00415a58d04e6817ae038fe656f182e8ced0426cd9553c1e0ca1320bc23f9bf436b3ddecca0490737b7995b15216186581f6bee94a75bdac772bb6c0ae34c72ee85017ae3c6b74f82d31122941bbbc8acf86fe38cd8bed0effd4f0d3cfb51bcd1da58b72140e0777f253157da67c33245bbd5191430adb63d17045c743e3c3576f2c7e91598fc8d2f5d018b4e5456b6b894d88f56ac6be064bf90c8839b3b1ea4ded6b8a3262cbdbd18e416dc678df3b32b30464748ad00e5cd3e5286e598aa5fef0104fc958c138cc6c9879f28d021d932fc206452f20185ade7ad5ff9b5b67aad5e7ada89babe5c3432f48e31a470f88b1e7453a5f70065987622ac65218cdfc4d517cdc017b428f3ed557ab9f9a9eb3b5a498d23a100f8dc5b3208606abe3a101d7650e5b56500e8acac6edbb02829c254eb1f302b2db7ef36fa288202a66873688f1543469f74d53e576876edbac11d90b715268d1fd2e4393269acbb6fe24a8a9e1094d2882ec5d399089f84995735e3db69861c9e4fe475fcdef3b76b74f3c9087d6b35bef56b8a60ea65d15fc474f99ada8e456e0ccec51be5f8e7baf681a77fde6855d8501cb24b3052e7945a514f041c7cc5e3c45cbfa5f770bb68e31fd399a150ff06116633f75f240cacea1fdcc1959f5ef9c89682814aec8a526cec2402353cec1c15a376533012bc7520d50d3d3207d49240599f5f0d00cd73489fcaa6bdbc62b96caabde8f4bc86fd689a0b5a1c8b231ce68fb4b41dc538325e31203065ba633d26990055767165ef5f78074ba628aa922604d3d5b16f226c4a6c022283bcd05ef8f1f61e9c0a1ab96228823a5fa75bc44865117dc0ae01ddcee6c32dbc0ba7f8001bd29e9171cb384ce66148337456c35241f69fbd025ed7f48514a08bb29d5445e93f9b2e408a0f7ae0e26dbfc9360d31b0c7954426d8bfd4c5efdd6181ddd8412de15937a1b194a3666524588d4935d5af29ef46821fb96ea31870450ce44518f5a49a0dcab30124b838e7ca5f072c2d15b2a8258b59739fa1f8f26a922c8e56ca21c0e591a332e7457b7aae911d50dba66c09ee6b315144078db0536eb581bb24606bc68b04809e88d601ff6acd4886aafd34ce9d66e6ec69af07ffa8aeafe3b01753ecfde701755a51848367bbf8db0e36605f2c27e09cade2d1c550d6f6c66909521755e02af768d055c88acd35f77f249283bd86fa7e37305ffa676b74c825ca9c27ca57fd09192040516d0ca0d45b5ddaff0c2005585a5cc23de8d967abfefe656b7d2a789a597023e0b6e045438cd3582d30e6e282e36007a0f668bae26018301c31d1a9dd757d0503eea1a0bc7a504b05e30193ef3df485c92b15680bb938328ecb2b66ff527e71f6619b34299ef2839dc52627f4fdc0a653000e0c97a786ad1e06db2df8894cc370b000295d1bd617b9dd4c99b48eb549e2f4797d6d8df19c5cd60f8ba2931baa2d294289ee7aca67ec81f3e79062128752fe70deaebaa24c68cb3a40f6b93b34a75e92674666315240674053ed995c96c16f73c19c415176830b9158c599db24e999f3275065c80662d4c938bab20f9e122b3429d0a558295f1abaef9489915cdb1d8452047ce9e851500cb62e394995fac49a2339e4b0c45c64eb8f7d5f9602ead87b0f6c7fd4afd49dd974e4ac7c03e0c105d947399b7f5237ea490b051dbfaf0ccaa12003ddd8ee1e0f908090933900bbe6b1cc8f08f1ccc12b4e8a508627fa2fee67b9f248e534eda32ffc04030a3493b5e12d592a10c417d4a118e75b707f891d4fbd6f4cdac3e6c6bff3d866be454e9841573e750db97b61fff029b30dd72c2a4f1c876d382e6c9f6e3ebb1360a7117e5b7f9304d8229f93189fc959ecd66a1a9df46152c7c7b24ec9f2efbba5c6d3dce931682726e3e3aa37996913fb27eeb05f78084b4fd1b46ce550434a3e93af2bbe4bc0d19e91675567b190b40f08ef73bad4ddea26b6b5f19749339180f589cd68021bc0d6d6485172008fcddcfdb6bd652160450ff07455782d50216b63c1df416865c1ebf5b4c8c0ddc502348ebe070d487bdc1f3ce92258704b5508270a7182d6ea9ff5a3361b08b9b0e0f4a61d5ccb0d1a6a07fdfcc673a8d712b410d3879a56a867a4525f663d897c37f3b114e9096df0b14741bafa578478ef0c76d843ffafc59f590ca590943570ed7a9cf6ff44cba7897af0bb1f512de4bf7c38ec9425f854b9ec0349c38eb0bd3d09c2425597ea6216929d58c78806607facfce466b2457b0e60dea2e047533fb33c65d70d2a05177fe0f4207d6ec64ea2f6ff916c2ddd79949815d1400f886bfd7767d6291a291638be10854ef5c9d41816fd79be2265771a42e1e0f6e850847838ef87e113de436e014e269c4f1b6d169f3c717859b682e6c81b91dd1b1208850b0556e93fa7307c24c0befd8372ed53146fc2d7e7a2a0952b29e7c8b6d201983025ab6c760fc0c2f155afec49420346dbb9303086afcdeeb66cd97c43c33ee9fd9c9bd2f40a2b483c423bc44ad9f57018b4b6ee20330970137f3bf4056c92388e09418963f37dae7d770c461134d8b9ee2683a8cbd3d499564c2c0999a1a41ca9ac27445e283149fec9a679cf82c3b761ad883372f11472eaaa61f9d06f51e0ef360a3424118245d2579562e41fc9edf88afe1854687a25395c66106d88795c8a1319e088b53aa1c304a54f8eca9bcc9488d63198ad2dfe6b4db3adeecf13c0fe811817b293c84ee20530aae9d81c2a4f1cbc71227bf56a41f4e85e25b82f584e7dfcc0f051f1c2b88c78772d5e5c4718aa210534f078cf1d9c1616af1436ec5c03e38dbcb59cc74bd12b8f11fa73928db9e3036e91c097a939a711fcd90fd0449266a561f6f4ddef3ac251a993f49a4dcf7bdd4b69dc174df10afca20fdc39fec6bbc436ac1f28acfca1847450c1aa6f988ad4505e837351b38214ffc215cd500b835eb5e63ddc975312afb260b4682d8d23b1aaf68fe59c4e2fe3f33bcab768868681a173a25bc495a4c97e594e5e57b77a09d3f9b0db4277e83998550d348aff8a32d40bf1f525f46bb74e5237f59566b74fd8dd7f26b51cd834003c07a59ee6ee7e2bfac3c09bb4053ba44f3ec0bde2f7ca5d2d92391d84f5780e198b48801619e67639fbe65e72625714745b2657dfea1aae69e699e899dc880f995bc3beeec33b3e5b2936efa2eb1be0833c5de9d5b215f323dfdfb92cd803ef9662bc7215ab06d1b1ffd1e5cfd5f63d59ffaf0cc60ac05bf4ddcce97107dd63b2290fafa4b8ab747bd600d80cee8e7f8f62f0a9c1aea366d7314a5284b5686675e8f1c00af500d4211184c8f19fdb570318f176903c09fe73d4f44970cf5672e15ab204b95027bbd64ecc27d8127acdf8abd36c2f64b6c4aae3b5daf099ba261081dc67a930edfd51a83e425ece096e611efb5b0e984606a8954831420e0568e26ee191bcbb05781a176de05b8697c6c3e37943272a616f307dae7b0dadd5ab06202df6c8171bebdf736480a2f7d997c80783c37e2e6e4ef06f3542c492dfdf9dd0e54971c062dfe91bb9ae9de95b52ab65e05c85206be85c4994749340c9db04443adef1ed74a9bb62b1e4e9d7b1dbfbc0a1c93e86cd82d71c31c6ce2e0bae6cb23e2d09970b125db7965961f8353bc00931a9d0b9edabfd4af39cfe139da2a66bcef48d4f5b59039e7d2b7e13d752da1876bbb31e6392a4c8babe70138ca466d36d83ed35ae00f351b42f0bc278fa678b987170969b8187ed8cbd32c4b47a9a22aaaa27e3ab52e3d380a27c850e0ae7cae174e27d913c80d4f9e1d463cddb742e6ef6ee5d4e2c44853c9b43e1b0761d5a9c6ec57e55fc080fb3bc104f89d3817b5bffd9a8cbe5118c42441fc72c2ef96487e570c1fb159caac5ec78ec803e94fc82734db1026a30e58529be8bd1221783764bf0c199304f0fc0c676c1e9975a40f4d74af35c66ac2ce54879dee51919c4f22dc6cc4aa24bf47046da61d5db673440b7d3150d077ecd7ab43925428009830a1e0724356508f7a03025e9f7ce8793b8207d1be848d5242a96780a0410eef45594b6a3327f28d347a9f381f36dc5869a8c56c9f0158276ae8a947640d6a405e0239ead8192deb04b2536d9363b13672b3d2a2c0b176798b599abc13433dd9adc7c58cb5a72842e261567e4fb83f3e98afc69e341c25e059deb81afcac0e475a4ff32e85bc1f148cead6a9a5491c0df5f45ceed3a2c4ad4278bce8b0d727f54e77b64807d76d8c76742edd9ed4cb"}, &(0x7f00000012c0)=0x1008) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0xa082, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect(r2, &(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x80) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001480), 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000014c0), 0x4) 23:57:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 23:57:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="e03f030024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:03 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000001340)="13c932477e04d40e8f4449269a8cdd741e5185519d347823b4cfde1dab83171b56def3e674fc913244cc731c44d7ca89024ad98d222e9ba99cfef5a7519ad1d6c0506444510fbf717c808525b25a3ad3973eaaf9c9f59bba4245e110149a4293f37c59c6a954e0add85e69b18c41dff0e54319442099224d0e95f13b577ca6fe384cc2d5940dfdc6a6ec219d7816a508305a7a52a0f0f5f0", 0x98, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="2321202e2f66697c653020232f24280f2320402b217b0ace44a97e2f65f89eb4947cbba44e2a81a15b085233ea3f99de2eb07cee63163fd66a4003f4708f4d"], 0x3f) (async) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001400)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @multicast2}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x220, 0x7}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0xa082, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) connect(r2, &(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x80) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001480), 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000014c0), 0x4) 23:57:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x9, 0x20, 0x5e, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40c1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x9, 0x20, 0x5e, 0x1]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000811}, 0x40c1) (async) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:03 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 23:57:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 796.576964][T29521] binder: 29520:29521 ioctl c0306201 20001480 returned -14 [ 796.577781][T29521] binder: 29520:29521 ioctl c0306201 0 returned -14 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000001340)="13c932477e04d40e8f4449269a8cdd741e5185519d347823b4cfde1dab83171b56def3e674fc913244cc731c44d7ca89024ad98d222e9ba99cfef5a7519ad1d6c0506444510fbf717c808525b25a3ad3973eaaf9c9f59bba4245e110149a4293f37c59c6a954e0add85e69b18c41dff0e54319442099224d0e95f13b577ca6fe384cc2d5940dfdc6a6ec219d7816a508305a7a52a0f0f5f0", 0x98, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="2321202e2f66697c653020232f24280f2320402b217b0ace44a97e2f65f89eb4947cbba44e2a81a15b085233ea3f99de2eb07cee63163fd66a4003f4708f4d"], 0x3f) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001400)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @empty}, {0x2, 0x4e24, @multicast2}, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x220, 0x7}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x1000, "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"}, &(0x7f00000012c0)=0x1008) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x24, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0xa082, 0x0) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect(r2, &(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x80) (async) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001480), 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000014c0), 0x4) 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="00f0ff7f24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 796.769097][T29539] binder: 29538:29539 ioctl c0306201 20001480 returned -14 [ 796.769880][T29539] binder: 29538:29539 ioctl c0306201 0 returned -14 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e1d, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet(r1, &(0x7f0000000100)="68500191f35a8167569b506cb1a400d9b1047aaa8d4023295ebf6835830870065f7df0c0156a7e9466fd3d5eca7cc4f610f478dacc4ebb855b958c9741882270c874a02b9568e0f1a9df62e5e8b6daf9d3770498732fcd341bb691e7e0dadfab36f1f57c1c739ee0", 0x68, 0x40000, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) readahead(r1, 0xffff, 0xfffffffffffffff9) 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="effdffff24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e1d, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendto$inet(r1, &(0x7f0000000100)="68500191f35a8167569b506cb1a400d9b1047aaa8d4023295ebf6835830870065f7df0c0156a7e9466fd3d5eca7cc4f610f478dacc4ebb855b958c9741882270c874a02b9568e0f1a9df62e5e8b6daf9d3770498732fcd341bb691e7e0dadfab36f1f57c1c739ee0", 0x68, 0x40000, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 796.903806][T29562] binder: 29561:29562 ioctl c0306201 20001480 returned -14 [ 796.916227][T29562] binder: 29561:29562 ioctl c0306201 0 returned -14 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000003001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async, rerun: 64) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async, rerun: 64) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e1d, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendto$inet(r1, &(0x7f0000000100)="68500191f35a8167569b506cb1a400d9b1047aaa8d4023295ebf6835830870065f7df0c0156a7e9466fd3d5eca7cc4f610f478dacc4ebb855b958c9741882270c874a02b9568e0f1a9df62e5e8b6daf9d3770498732fcd341bb691e7e0dadfab36f1f57c1c739ee0", 0x68, 0x40000, &(0x7f0000000180)={0x2, 0x4e22, @remote}, 0x10) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 797.023360][T29575] binder: 29570:29575 ioctl c0306201 20001480 returned -14 23:57:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:57:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) readahead(r1, 0xffff, 0xfffffffffffffff9) 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000f001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x8, @remote}, 0x1) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000480)={'erspan0\x00', {0x2, 0x0, @broadcast}}) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/157, 0x9d}], 0x3, &(0x7f00000003c0)=""/101, 0x65}, 0x40010000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 797.141527][T29589] binder: 29580:29589 ioctl c0306201 20001480 returned -14 23:57:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x8, @remote}, 0x1) (async, rerun: 64) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) (rerun: 64) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000480)={'erspan0\x00', {0x2, 0x0, @broadcast}}) (async, rerun: 64) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/157, 0x9d}], 0x3, &(0x7f00000003c0)=""/101, 0x65}, 0x40010000) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4402000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) [ 797.268664][T29604] binder: 29602:29604 ioctl c0306201 20001480 returned -14 23:57:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:57:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delchain={0x2c, 0x64, 0xf31, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) readahead(r1, 0xffff, 0xfffffffffffffff9) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x8, @remote}, 0x1) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000480)={'erspan0\x00', {0x2, 0x0, @broadcast}}) (async, rerun: 32) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000280)=""/30, 0x1e}, {&(0x7f00000002c0)=""/157, 0x9d}], 0x3, &(0x7f00000003c0)=""/101, 0x65}, 0x40010000) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async, rerun: 64) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (rerun: 64) 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) [ 797.386488][T29617] binder: 29611:29617 ioctl c0306201 20001480 returned -14 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4403000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:57:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0x80) [ 797.564516][T29635] binder: 29632:29635 ioctl c0306201 20001480 returned -14 23:57:04 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4404000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:57:04 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0}) 23:57:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4405000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:05 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0x80) 23:57:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 797.746562][T29644] binder: 29641:29644 ioctl c0306201 20001480 returned -14 23:57:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:05 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0x80) (async) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4406000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:05 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000380)={@private=0xa010102, @loopback, 0x0, 0x8, [@loopback, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x30) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000000280)="5781a151edfd2c9b3a82778249e19255b9c8dd5e3eab6f7859081fe7cb9cb5833f5aba76a4c9840ac1e883c6c8185b24a71de4d5d562172593e235759a352442d6c392ca9fbf75794e727986c7b197375bc9986a840dd1ea4098c4c3c8d5d385a91213535a0db4fac1f4827d3cde", 0x6e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xad7e32a1cd5143ae, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bond_slave_0\x00', 0xfffffe65) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000100)=0x8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xa0, @private=0xa010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4407000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = accept(r0, &(0x7f0000000080)=@ax25={{0x3, @rose}, [@null, @remote, @default, @netrom, @netrom, @bcast, @null, @default]}, &(0x7f0000000000)=0x80) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2d}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x43}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 797.983688][T29666] binder: 29660:29666 ioctl c0306201 20001480 returned -14 23:57:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = accept(r0, &(0x7f0000000080)=@ax25={{0x3, @rose}, [@null, @remote, @default, @netrom, @netrom, @bcast, @null, @default]}, &(0x7f0000000000)=0x80) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2d}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x43}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x1) (async) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:05 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:05 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="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", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4408000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4409000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:05 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket(0x10, 0x803, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000380)={@private=0xa010102, @loopback, 0x0, 0x8, [@loopback, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x30) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000000280)="5781a151edfd2c9b3a82778249e19255b9c8dd5e3eab6f7859081fe7cb9cb5833f5aba76a4c9840ac1e883c6c8185b24a71de4d5d562172593e235759a352442d6c392ca9fbf75794e727986c7b197375bc9986a840dd1ea4098c4c3c8d5d385a91213535a0db4fac1f4827d3cde", 0x6e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xad7e32a1cd5143ae, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bond_slave_0\x00', 0xfffffe65) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000100)=0x8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xa0, @private=0xa010102}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) socket(0x10, 0x803, 0x0) (async) accept4(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000000)=0x80, 0x80000) (async) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000380)={@private=0xa010102, @loopback, 0x0, 0x8, [@loopback, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x30) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000000280)="5781a151edfd2c9b3a82778249e19255b9c8dd5e3eab6f7859081fe7cb9cb5833f5aba76a4c9840ac1e883c6c8185b24a71de4d5d562172593e235759a352442d6c392ca9fbf75794e727986c7b197375bc9986a840dd1ea4098c4c3c8d5d385a91213535a0db4fac1f4827d3cde", 0x6e) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xad7e32a1cd5143ae, 0x4) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bond_slave_0\x00', 0xfffffe65) (async) pipe2(&(0x7f0000000180), 0x80000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000100)=0x8) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xa0, @private=0xa010102}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) [ 798.147219][T29682] binder: 29677:29682 ioctl c0306201 20001480 returned -14 [ 798.169835][T29685] FAULT_INJECTION: forcing a failure. [ 798.169835][T29685] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:57:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = accept(r0, &(0x7f0000000080)=@ax25={{0x3, @rose}, [@null, @remote, @default, @netrom, @netrom, @bcast, @null, @default]}, &(0x7f0000000000)=0x80) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2d}, 0x14}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x43}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x881}, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440a000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 798.169993][T29685] CPU: 1 PID: 29685 Comm: syz-executor.3 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 23:57:05 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x557c83) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 798.170017][T29685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.170026][T29685] Call Trace: 23:57:05 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:05 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440b000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 798.170030][T29685] [ 798.170035][T29685] dump_stack_lvl+0xcd/0x134 [ 798.170059][T29685] should_fail.cold+0x5/0xa [ 798.170092][T29685] _copy_to_user+0x2a/0x140 [ 798.170121][T29685] simple_read_from_buffer+0xcc/0x160 [ 798.170169][T29685] proc_fail_nth_read+0x187/0x220 [ 798.170201][T29685] ? proc_exe_link+0x1d0/0x1d0 [ 798.170221][T29685] ? security_file_permission+0xab/0xd0 [ 798.170246][T29685] ? proc_exe_link+0x1d0/0x1d0 [ 798.170266][T29685] vfs_read+0x1ef/0x5d0 [ 798.170288][T29685] ksys_read+0x127/0x250 [ 798.170307][T29685] ? vfs_write+0xac0/0xac0 [ 798.170327][T29685] ? syscall_enter_from_user_mode+0x21/0x70 [ 798.170354][T29685] do_syscall_64+0x35/0xb0 [ 798.170369][T29685] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 798.170383][T29685] RIP: 0033:0x7f561da3bc9c [ 798.170395][T29685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 798.170409][T29685] RSP: 002b:00007f561eb81160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 798.170422][T29685] RAX: ffffffffffffffda RBX: 00007f561db9c030 RCX: 00007f561da3bc9c [ 798.170431][T29685] RDX: 000000000000000f RSI: 00007f561eb811e0 RDI: 0000000000000004 [ 798.170440][T29685] RBP: 00007f561eb811d0 R08: 0000000000000000 R09: 0000000000000000 [ 798.170448][T29685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.170456][T29685] R13: 00007ffcfb97e1df R14: 00007f561eb81300 R15: 0000000000022000 [ 798.170476][T29685] [ 798.256717][T29693] binder: 29692:29693 ioctl c0306201 20001480 returned -14 [ 798.387047][T29714] binder: 29700:29714 ioctl c0306201 20001480 returned -14 [ 798.574967][T29727] binder: 29725:29727 ioctl c0306201 20001480 returned -14 23:57:06 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 32) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="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", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) (async, rerun: 64) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) (async, rerun: 64) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:06 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@nfc, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000380)={@private=0xa010102, @loopback, 0x0, 0x8, [@loopback, @rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x30) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_opts(r3, 0x0, 0xb, &(0x7f0000000280)="5781a151edfd2c9b3a82778249e19255b9c8dd5e3eab6f7859081fe7cb9cb5833f5aba76a4c9840ac1e883c6c8185b24a71de4d5d562172593e235759a352442d6c392ca9fbf75794e727986c7b197375bc9986a840dd1ea4098c4c3c8d5d385a91213535a0db4fac1f4827d3cde", 0x6e) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xad7e32a1cd5143ae, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bond_slave_0\x00', 0xfffffe65) (async) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000100)=0x8) (async) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xa0, @private=0xa010102}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x557c83) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 23:57:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440c000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:06 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440e000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:06 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='batadv_slave_1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x557c83) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x557c83) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) [ 799.280903][T29738] binder: 29736:29738 ioctl c0306201 20001480 returned -14 23:57:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x1, @empty}, @in={0x2, 0xffff, @empty}, @in6={0xa, 0x4e20, 0x2, @remote}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0xffffff01}, @in={0x2, 0x4e20, @loopback}], 0x84) 23:57:06 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 799.468796][T29760] binder: 29758:29760 ioctl c0306201 20001480 returned -14 [ 799.750549][T29769] binder: 29768:29769 ioctl c0306201 20001480 returned -14 23:57:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="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", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) (async) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) (async) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) (async) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:09 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='batadv_slave_1\x00', 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440f000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x1, @empty}, @in={0x2, 0xffff, @empty}, @in6={0xa, 0x4e20, 0x2, @remote}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0xffffff01}, @in={0x2, 0x4e20, @loopback}], 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x1, @empty}, @in={0x2, 0xffff, @empty}, @in6={0xa, 0x4e20, 0x2, @remote}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0xffffff01}, @in={0x2, 0x4e20, @loopback}], 0x84) (async) 23:57:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x10, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4410000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:09 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='batadv_slave_1\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 801.970630][T29778] binder: 29771:29778 ioctl c0306201 20001480 returned -14 23:57:09 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="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", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x1, @empty}, @in={0x2, 0xffff, @empty}, @in6={0xa, 0x4e20, 0x2, @remote}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0xffffff01}, @in={0x2, 0x4e20, @loopback}], 0x84) 23:57:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4411000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 802.122035][T29800] binder: 29797:29800 ioctl c0306201 20001480 returned -14 23:57:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) write$sndseq(r1, &(0x7f0000000240)=[{0x0, 0x8, 0x0, 0x0, @time={0x0, 0xc3}, {0x6e, 0x6}, {0x68, 0x4}, @quote={{0x44, 0x6}, 0x800, &(0x7f0000000080)={0x1, 0x76, 0x9, 0x2, @time={0x80000001}, {0x20, 0x5}, {0x2, 0x20}, @time=@time={0x7fffffff, 0x5}}}}, {0x0, 0x52, 0x81, 0x8b, @time={0xfffffffe, 0x3}, {0x8, 0x9a}, {0x4, 0x9}, @raw32={[0x4, 0x2]}}, {0x4, 0x1, 0xce, 0x5, @time={0x3, 0x8}, {0x6, 0x6}, {0x6, 0xfb}, @raw32={[0x5, 0x9, 0x7]}}, {0x1, 0x6, 0x5, 0x3, @tick=0xfffffff7, {0x2, 0x2}, {0x9}, @note={0x2, 0x9, 0xd7, 0x40, 0xfff}}, {0xe8, 0x1f, 0x2e, 0x8, @tick=0x40, {0x80, 0xf0}, {0x1f, 0x1}, @control={0x0, 0x8, 0x7fffffff}}, {0x1, 0x3, 0x80, 0xe1, @tick, {0x0, 0x1}, {0xe5, 0x2}, @time=@time={0x9, 0x8001}}, {0x0, 0x6, 0x4, 0x81, @tick=0x3, {0x4, 0x53}, {0x4, 0xf9}, @quote={{0x8, 0x6}, 0x6, &(0x7f00000000c0)={0x20, 0x5, 0x8, 0x2, @time={0x8000, 0x9}, {0x3f, 0x1}, {0x1, 0x7c}, @connect={{0x9, 0x3f}, {0x5, 0x6}}}}}], 0xc4) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4460000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:09 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) listen(r1, 0xfffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) finit_module(r2, &(0x7f0000000140)='\\*\\&:/.(}*\x00', 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x541b, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 802.311789][T29814] binder: 29813:29814 ioctl c0306201 20001480 returned -14 23:57:09 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) write$sndseq(r1, &(0x7f0000000240)=[{0x0, 0x8, 0x0, 0x0, @time={0x0, 0xc3}, {0x6e, 0x6}, {0x68, 0x4}, @quote={{0x44, 0x6}, 0x800, &(0x7f0000000080)={0x1, 0x76, 0x9, 0x2, @time={0x80000001}, {0x20, 0x5}, {0x2, 0x20}, @time=@time={0x7fffffff, 0x5}}}}, {0x0, 0x52, 0x81, 0x8b, @time={0xfffffffe, 0x3}, {0x8, 0x9a}, {0x4, 0x9}, @raw32={[0x4, 0x2]}}, {0x4, 0x1, 0xce, 0x5, @time={0x3, 0x8}, {0x6, 0x6}, {0x6, 0xfb}, @raw32={[0x5, 0x9, 0x7]}}, {0x1, 0x6, 0x5, 0x3, @tick=0xfffffff7, {0x2, 0x2}, {0x9}, @note={0x2, 0x9, 0xd7, 0x40, 0xfff}}, {0xe8, 0x1f, 0x2e, 0x8, @tick=0x40, {0x80, 0xf0}, {0x1f, 0x1}, @control={0x0, 0x8, 0x7fffffff}}, {0x1, 0x3, 0x80, 0xe1, @tick, {0x0, 0x1}, {0xe5, 0x2}, @time=@time={0x9, 0x8001}}, {0x0, 0x6, 0x4, 0x81, @tick=0x3, {0x4, 0x53}, {0x4, 0xf9}, @quote={{0x8, 0x6}, 0x6, &(0x7f00000000c0)={0x20, 0x5, 0x8, 0x2, @time={0x8000, 0x9}, {0x3f, 0x1}, {0x1, 0x7c}, @connect={{0x9, 0x3f}, {0x5, 0x6}}}}}], 0xc4) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) (async) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:09 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44f0000024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 802.382058][T29820] __nla_validate_parse: 2 callbacks suppressed [ 802.382077][T29820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:57:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) write$sndseq(r1, &(0x7f0000000240)=[{0x0, 0x8, 0x0, 0x0, @time={0x0, 0xc3}, {0x6e, 0x6}, {0x68, 0x4}, @quote={{0x44, 0x6}, 0x800, &(0x7f0000000080)={0x1, 0x76, 0x9, 0x2, @time={0x80000001}, {0x20, 0x5}, {0x2, 0x20}, @time=@time={0x7fffffff, 0x5}}}}, {0x0, 0x52, 0x81, 0x8b, @time={0xfffffffe, 0x3}, {0x8, 0x9a}, {0x4, 0x9}, @raw32={[0x4, 0x2]}}, {0x4, 0x1, 0xce, 0x5, @time={0x3, 0x8}, {0x6, 0x6}, {0x6, 0xfb}, @raw32={[0x5, 0x9, 0x7]}}, {0x1, 0x6, 0x5, 0x3, @tick=0xfffffff7, {0x2, 0x2}, {0x9}, @note={0x2, 0x9, 0xd7, 0x40, 0xfff}}, {0xe8, 0x1f, 0x2e, 0x8, @tick=0x40, {0x80, 0xf0}, {0x1f, 0x1}, @control={0x0, 0x8, 0x7fffffff}}, {0x1, 0x3, 0x80, 0xe1, @tick, {0x0, 0x1}, {0xe5, 0x2}, @time=@time={0x9, 0x8001}}, {0x0, 0x6, 0x4, 0x81, @tick=0x3, {0x4, 0x53}, {0x4, 0xf9}, @quote={{0x8, 0x6}, 0x6, &(0x7f00000000c0)={0x20, 0x5, 0x8, 0x2, @time={0x8000, 0x9}, {0x3f, 0x1}, {0x1, 0x7c}, @connect={{0x9, 0x3f}, {0x5, 0x6}}}}}], 0xc4) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r2) close_range(r0, 0xffffffffffffffff, 0x0) [ 802.513500][T29827] binder: 29826:29827 ioctl c0306201 20001480 returned -14 23:57:10 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="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", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400030024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/155) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc0581) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0x8, 0x7, 0x1, 0x3f, 0x3, [0x2, 0x7fff, 0x12000, 0x1]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23:57:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x5421, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:10 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) listen(r1, 0xfffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) finit_module(r2, &(0x7f0000000140)='\\*\\&:/.(}*\x00', 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) listen(r1, 0xfffffffe) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) finit_module(r2, &(0x7f0000000140)='\\*\\&:/.(}*\x00', 0x1) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000100)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) [ 803.108457][T29851] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 803.114232][T29846] binder: 29842:29846 ioctl c0306201 20001480 returned -14 23:57:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 803.142913][T29848] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:10 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:10 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/155) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc0581) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0x8, 0x7, 0x1, 0x3f, 0x3, [0x2, 0x7fff, 0x12000, 0x1]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/155) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc0581) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0x8, 0x7, 0x1, 0x3f, 0x3, [0x2, 0x7fff, 0x12000, 0x1]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 23:57:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400050024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 803.203348][T29861] binder: 29860:29861 ioctl c0306201 20001480 returned -14 23:57:10 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400060024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x5450, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 803.344403][T29874] binder: 29868:29874 ioctl c0306201 20001480 returned -14 [ 803.390124][T29877] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:11 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="b3c2998e9941cb84f374cbd19e3483f7d01830968a34c456a895a2c6211443402ad9ead4fbd9e7ffa6e6de6a97bb6d115e38c0acf63b428ef6543d09d07b8be73bfb82b7b66a5bb485bb312d8d42abcdb55d1d997f5f96d82fbffe1fe15edd06ae536ff62531d9048759709b15f323ff21581f33cd127808c361364cf2dccc4dc0aa6507d81a651ddc303b5b7e06be00921bfb2451fec7e2f6b64010d5221b088b4b31d5c4044ea5c2f8a0288cb26143dcb02555a2b8c7778c252d7a9c656156bd274d23e7183ea28d28ba213bc8a3c678c90247747fad50528f42932c55ad710f11e67cd80029a58d590ae248b3961554da01b3242f7bbfd647af8c", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:11 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) listen(r1, 0xfffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) finit_module(r2, &(0x7f0000000140)='\\*\\&:/.(}*\x00', 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400070024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a6873000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:11 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/155) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc0581) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0x8, 0x7, 0x1, 0x3f, 0x3, [0x2, 0x7fff, 0x12000, 0x1]}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x50241, 0x0) (async) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000080)=""/155) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xc0581) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000040)={0x8, 0x7, 0x1, 0x3f, 0x3, [0x2, 0x7fff, 0x12000, 0x1]}) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) 23:57:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x5451, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a6873000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4468070024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 804.245975][T29902] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 804.266617][T29898] binder: 29895:29898 ioctl c0306201 20001480 returned -14 23:57:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400090024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00M)\x00\a\x00\x00\x00'], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) close_range(r1, r0, 0x0) [ 804.365341][T29900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:57:11 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) connect(r0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xf7, 0xd7, "a1745e0cde11b2929ae256c16d33cb6e0e5ab9aae2e10d13ef80c127ea0554fb06c5115ec5d3570b21c01d49056eb028d5cf6ab50c16d5444975935a674beb", 0x2a}, 0x80) 23:57:11 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a6873000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 804.518946][T29922] binder: 29921:29922 ioctl c0306201 20001480 returned -14 [ 804.615368][T29928] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 804.730303][T29932] binder: 29930:29932 ioctl c0306201 20001480 returned -14 23:57:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000a0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x5452, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00M)\x00\a\x00\x00\x00'], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) close_range(r1, r0, 0x0) 23:57:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000b0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 805.316949][T29945] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 805.339655][T29943] binder: 29937:29943 ioctl c0306201 20001480 returned -14 23:57:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00M)\x00\a\x00\x00\x00'], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) close_range(r1, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00M)\x00\a\x00\x00\x00'], 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) close_range(r1, r0, 0x0) (async) 23:57:12 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect(r0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xf7, 0xd7, "a1745e0cde11b2929ae256c16d33cb6e0e5ab9aae2e10d13ef80c127ea0554fb06c5115ec5d3570b21c01d49056eb028d5cf6ab50c16d5444975935a674beb", 0x2a}, 0x80) [ 805.459400][T29951] binder: 29950:29951 ioctl c0306201 20001480 returned -14 23:57:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 805.500319][T29955] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000c0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x10}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x9c, 0x0, 0x4, 0x2, @empty, @remote, 0x20, 0x80, 0x80, 0x25}}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006500040029bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="67b1090003000b000b00f1ff0600050080ff000008000b00070000000b000100666c6f77657200000c00000006002500000000000600050001400000"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) close_range(r0, r1, 0x0) [ 805.650343][T29970] binder: 29967:29970 ioctl c0306201 20001480 returned -14 23:57:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000e0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], 0x0}}], 0x0, 0x0, 0x0}) [ 805.687788][T29974] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x5460, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], 0x0}}], 0x0, 0x0, 0x0}) [ 805.768178][T29979] binder: 29978:29979 ioctl c0306201 20001480 returned -14 23:57:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000f0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 805.931097][T29990] binder: 29989:29990 ioctl c0306201 20001480 returned -14 23:57:13 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async, rerun: 32) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async, rerun: 32) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (rerun: 32) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect(r0, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x0, 0x7, 0xf7, 0xd7, "a1745e0cde11b2929ae256c16d33cb6e0e5ab9aae2e10d13ef80c127ea0554fb06c5115ec5d3570b21c01d49056eb028d5cf6ab50c16d5444975935a674beb", 0x2a}, 0x80) 23:57:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], 0x0}}], 0x0, 0x0, 0x0}) 23:57:13 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a687300000000"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400110024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x10}}}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x9c, 0x0, 0x4, 0x2, @empty, @remote, 0x20, 0x80, 0x80, 0x25}}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006500040029bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="67b1090003000b000b00f1ff0600050080ff000008000b00070000000b000100666c6f77657200000c00000006002500000000000600050001400000"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) close_range(r0, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x10}}}, 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x9c, 0x0, 0x4, 0x2, @empty, @remote, 0x20, 0x80, 0x80, 0x25}}) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006500040029bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="67b1090003000b000b00f1ff0600050080ff000008000b00070000000b000100666c6f77657200000c00000006002500000000000600050001400000"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) (async) close_range(r0, r1, 0x0) (async) 23:57:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x8933, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4465580024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 806.487845][T30005] binder: 30001:30005 ioctl c0306201 20001480 returned -14 23:57:13 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) listen(r1, 0xfffffffe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) finit_module(r2, &(0x7f0000000140)='\\*\\&:/.(}*\x00', 0x1) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:13 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], 0x0}}], 0x0, 0x0, 0x0}) 23:57:13 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400600024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xaece, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:14 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 806.669186][T30029] binder: 30018:30029 ioctl c0306201 20001480 returned -14 [ 806.845504][T30042] binder: 30041:30042 ioctl c0306201 20001480 returned -14 23:57:14 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3ff, 0x7, 0xa08d, 0x401, 0x91bf, 0x2], 0x6, 0x800}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4458650024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_void(r5, 0x1, 0x24, 0x0, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xffff}, {0x10}}}, 0x24}}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x9c, 0x0, 0x4, 0x2, @empty, @remote, 0x20, 0x80, 0x80, 0x25}}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000006500040029bd7000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="67b1090003000b000b00f1ff0600050080ff000008000b00070000000b000100666c6f77657200000c00000006002500000000000600050001400000"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) (async) close_range(r0, r1, 0x0) 23:57:14 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x20) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="6b7b4594eaf94672cb54df816928ed9fe455cdcb8878baf988558c341d70f0555904e8dbb4695bb0e53736e165a963c799a82c8821c3f9badde5fde5106baeac71ef93000005f50c8c68856329626788bfd1b33c3bdbd1a30000ec0c22542c8d283ead90edcf31039960dfb23f9a9ffaa571b72566dc062d934ee3446c12ac453be0933563", 0x85}, {&(0x7f00000000c0)="8dd6cf4e3a187c9662749c21cb35968e7fc0988bb2ad652748387d308bd7de37c6540b884e98b23a1e5f89a90da36516818268589059c0d3fabb2d4fe6", 0x3d}, {&(0x7f00000004c0)="2c7926c33cc0317ad50ee2d926d8ed360b44014a1627727cfacea40d4807c2902e86a70970306e01a12ab827738f35d3376f50428d49a763e16f12ec4b7eab1fad8b4e4f9362469f1238541d81652fc184621630ca3d21f94653d62fd96d6a49dc6efec20a6b352534", 0x69}, {&(0x7f0000000540)="66973b6790fe3e445c", 0x9}, {&(0x7f0000000580)="3c8e916cd2fa1f", 0x7}, {&(0x7f00000005c0)="b3c2998e9941cb84f374cbd19e3483f7d01830968a34c456a895a2c6211443402ad9ead4fbd9e7ffa6e6de6a97bb6d115e38c0acf63b428ef6543d09d07b8be73bfb82b7b66a5bb485bb312d8d42abcdb55d1d997f5f96d82fbffe1fe15edd06ae536ff62531d9048759709b15f323ff21581f33cd127808c361364cf2dccc4dc0aa6507d81a651ddc303b5b7e06be00921bfb2451fec7e2f6b64010d5221b088b4b31d5c4044ea5c2f8a0288cb26143dcb02555a2b8c7778c252d7a9c656156bd274d23e7183ea28d28ba213bc8a3c678c90247747fad50528f42932c55ad710f11e67cd80029a58d590ae248b3961554da01b3242f7bbfd647af8c", 0xfc}], 0x6, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x30, 0xc080}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040)=0xfffffffe, 0x4) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x1d, &(0x7f0000000000), 0x20a154cc) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x0, r5}) 23:57:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4407680024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) 23:57:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400810024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:14 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3ff, 0x7, 0xa08d, 0x401, 0x91bf, 0x2], 0x6, 0x800}) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400f00024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000007b001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:14 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000c0001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 1) 23:57:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) 23:57:15 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3ff, 0x7, 0xa08d, 0x401, 0x91bf, 0x2], 0x6, 0x800}) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x3ff, 0x7, 0xa08d, 0x401, 0x91bf, 0x2], 0x6, 0x800}) (async) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) 23:57:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 808.287826][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.287877][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 23:57:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000ec0001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (rerun: 64) 23:57:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400020024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:15 executing program 2: r0 = socket$inet(0x2, 0x1, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) splice(r0, &(0x7f0000000100)=0x6, r0, 0xfffffffffffffffd, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 2) [ 808.476984][T30104] binder: 30103:30104 ioctl c0306201 20001480 returned -14 [ 808.478316][T30104] ERROR: Out of memory at tomoyo_realpath_from_path. 23:57:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, 0x0, &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400030024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:15 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 3) [ 808.631939][T30117] binder: 30115:30117 ioctl c0306201 20001480 returned -14 [ 808.641503][T30117] ERROR: Out of memory at tomoyo_realpath_from_path. 23:57:16 executing program 1: umount2(&(0x7f00000000c0)='./cgroup\x00', 0x8) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') 23:57:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400040024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1c14c1) close_range(r0, 0xffffffffffffffff, 0x0) [ 808.783704][T30124] binder: 30122:30124 ioctl c0306201 20001480 returned -14 [ 808.785094][T30124] FAULT_INJECTION: forcing a failure. [ 808.785094][T30124] name fail_usercopy, interval 1, probability 0, space 0, times 0 23:57:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 4) 23:57:16 executing program 2: r0 = socket$inet(0x2, 0x1, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) splice(r0, &(0x7f0000000100)=0x6, r0, 0xfffffffffffffffd, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x5) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) splice(r0, &(0x7f0000000100)=0x6, r0, 0xfffffffffffffffd, 0x2, 0x0) (async) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) (async) 23:57:16 executing program 1: umount2(&(0x7f00000000c0)='./cgroup\x00', 0x8) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') [ 808.785129][T30124] CPU: 1 PID: 30124 Comm: syz-executor.4 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 23:57:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1c14c1) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1c14c1) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 808.785158][T30124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 808.785172][T30124] Call Trace: [ 808.785179][T30124] [ 808.785187][T30124] dump_stack_lvl+0xcd/0x134 [ 808.785221][T30124] should_fail.cold+0x5/0xa [ 808.785266][T30124] _copy_from_user+0x2a/0x170 [ 808.785294][T30124] binder_ioctl+0x560/0x6d80 [ 808.785441][T30124] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 808.785478][T30124] ? tomoyo_path_number_perm+0x24e/0x590 [ 808.785547][T30124] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 808.785585][T30124] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 808.785631][T30124] ? binder_thread_write+0x3220/0x3220 23:57:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400050024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 808.785663][T30124] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 808.785695][T30124] ? do_vfs_ioctl+0x132/0x15c0 [ 808.785728][T30124] ? vfs_fileattr_set+0xbe0/0xbe0 23:57:16 executing program 1: umount2(&(0x7f00000000c0)='./cgroup\x00', 0x8) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') umount2(&(0x7f00000000c0)='./cgroup\x00', 0x8) (async) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') (async) 23:57:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 5) 23:57:16 executing program 2: r0 = socket$inet(0x2, 0x1, 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) splice(r0, &(0x7f0000000100)=0x6, r0, 0xfffffffffffffffd, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1c14c1) close_range(r0, 0xffffffffffffffff, 0x0) [ 808.785776][T30124] ? __context_tracking_exit+0xb8/0xe0 [ 808.785821][T30124] ? __fget_files+0x286/0x470 [ 808.785859][T30124] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 808.785890][T30124] ? binder_thread_write+0x3220/0x3220 23:57:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x40049409, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400060024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) [ 808.785925][T30124] __x64_sys_ioctl+0x193/0x200 23:57:16 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0xffffffff, 0x4}, &(0x7f0000000200)=0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffdc8) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) [ 808.785960][T30124] do_syscall_64+0x35/0xb0 23:57:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 6) [ 808.785987][T30124] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 808.786016][T30124] RIP: 0033:0x7f58ab2890e9 23:57:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400070024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 808.786035][T30124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 23:57:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:16 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0xffffffff, 0x4}, &(0x7f0000000200)=0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffdc8) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) socket$inet(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)=0x7fff, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0xffffffff, 0x4}, &(0x7f0000000200)=0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffdc8) (async) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) (async) 23:57:16 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) (fail_nth: 7) 23:57:16 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = gettid() r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000007000), 0x2, 0x0) r5 = socket$isdn(0x22, 0x3, 0x11) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r7, 0x0) sendmmsg$unix(r2, &(0x7f00000078c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="ccefe8e073d07cfc259567c32ff510f73b4fc9bcc0c4f29684ef3523b97e5816f20f382bdcd9b66a524b59088213cd636c9bda16412f2e3b72e62cdef72eda7cb0d57b8a7f1cc0fe844875670f88870bf9fca5de8ff6edff8b65842f3834c5085fe1ed6140465541cc0c6429471af027a632596892c67d9a021c4af047902bac3e63e6c7c6be121a70505be0173891efe66e64550b272d511fdb694590d5aeb948b747148ecce395e4f9d8c9c24945c3", 0xb0}, {&(0x7f0000000300)="703c0696ecdbcd55e97254960f3e5e3ca62e425c8f7a99d865382974dbcf92915e349740f990a8fabdd8f263784c542a23254ebe2e8b27d7bd40a256c0be17e200a9349fa699ca0a2ffd8e46954072bbc6630f5400915c390c49cf6098feeba3b394f164510dfc8fb6840858f2fef82b2a09c6605e68a6f05b25c6a52e1d1020aaf0598626b5f78d006630fe9598ac13d09eed9f8562", 0x96}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000180)="32c5038a4a5805dd4afc64387c3c475044e23949445426d89028eeed0aa688830b8a4f25855a98509ca3c9ad3d9b69a4b8afad8c64febcb107357190bca89218aa8229fa3d3a4463105b11fcb9a832954234947faece8846a1365f13e1e811a664a23cee99207d7a7cbbccad130a011e5c550283a79a21ac28", 0x79}, {&(0x7f00000003c0)="d299695a71be2a4377f5316c0072181c5514de6ea21a1a11a93815d7b9f1f6e7b4c19fee08022a27530ebdfba7c38d95ffc69eefbf84451f0b9890c709b511c35109862363f105a9c72cf82742a050fb06455eb3e3a7e73e006d9c2153f5103c6637dcea6388a93806cfe987415e41e33c6c97dc8091873701d02e86de19d2a61e214224079c93d1eda286829aecd100a2f7", 0x92}, {&(0x7f0000000480)="29be93af265fad50735763b6ca81b363b1c9f18e8f95bbab747ee7c3109aa1aa585e5f3ac625f34a521d8a3ac1c03690af8ba5be1102c93ca87342e7024e02a999b01a15f62d18691ff53d74a44e3a2e16092c0f66ea1f368a284fdbf58f561289d89710e9a34e6a076602155dcd761f44897dbeaffb95280ef9e4b25e66ac97a69720a8a0a99eab4c813a14420e43dae99e108b485f8123558a9498948473fe05e33748027988104610601e5708ceaf79a770f666de2147912376ca9ce627d53f2bdca8fe87165aeff227404c22ca93228b765bc0839f7041b8f54659347b7458b496850ff2d744576f81cb747e", 0xee}, {&(0x7f0000000580)="524afd1e852980d398942ef6ab101a43590ece41a29c59ab76d7abd15bc0f77ff0d6184caed3f0fe89850b41f81a073e2ac8f577865acc3fdab80aae8a4039d0cb4e78f56a54812fc62b9cd384505516159ce9949d94f4a68a5bcf137c81c7ac23fa731bd47814cd57717abcf5931c67604e81363e7a47257733f663799ae062ae5df1a93a3ff134b5a39d7f028625ccd1ee7b7a6102ca9a9fb58c4576112ec1a1d45bed03b9fabd493be346d751776e684cde148f", 0xb5}, {&(0x7f0000000640)="686c7daa3ae9153bf37c57c57cf643ddf3246b20756424b2fd4f0a1713075f5924f51033f657e60083a3d2da6b8888730c473c1ebbc5e4ad3334ae70983c9066286cb6e6483c7d9e8007a4430a9a9bd2ed6f4869633df8ecd55ee38de68ede9297e99db5190f0220ed213bc768e43caaa77c1d09843e67debdf044b46d02c8013bf0bc", 0x83}, {&(0x7f0000000700)="a2b1773198deffc7b80d231725a28b0bd1c108cd1ea77c496e53d6e44ddef78cede9e8033f6f163880c6a72d53ccc56aaa8640d321d2c824ec6c310e3bfb705844e658eedd17f1eaefc60c3b44900523f33fc1e924169d84910fbf", 0x5b}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="00fc00403b70c0fec2106d263dde2f404280f8b366f8a3a2090000003a12587636140ce9a472f4bf91af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20000000}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004d00)="2283a3b7ca398246018db5ab4d9d8db05463141da930bb13", 0x18}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004e80)="6d720d73aea7809c9abf0c404114d3a376daa46755e145a159eeb6a2cdd9c8aecb8f2fcc627895bd04312d95b883560ed62f70ba9f2a27", 0x37}, {&(0x7f0000004ec0)="6c28ca863e7fd2", 0x7}, {&(0x7f0000004f00)="9b2e16e9b7eb5b66d57967d9cc6a9d35", 0x10}, {&(0x7f0000004f40)="a0d3f6602d0d07108d64a6c991e2b959429b8d86bb5aa8f908847ba8f58678369496375bcc4a72dcb77b4b0263ec7ccb61ae1d71bf019628fa2173b9d605c8697c22424661dc8654a11561c1e1a9d855ce460b63febd949eeb712bdc42f85d7f6b5a5e19d8b8f99ff59133a21f176494359434cdfc3c7186bea71f29f574c8a57e32d0a77b6e9d2d311d5c1f1169003543d3364269daffcd166b58527cc42434b29b5ffb3904527e9f22b70b2c0dc3228d5c3bb2049397433779703a5d53721cf63eedf1f6aed6aacad0c6538a60480770057e74550a7aa6818359cfea265c13ddd793e242f179f4d026dcd7f9", 0xed}, {&(0x7f0000005040)="432769b1c2c09bc2c25f0cbbb17aa84b52ee03eebe6808c8916a6b8e36c8924dcaa7b65d828d049f3bc524a1c95d6d06bb657bf0ab608e2f4d194746e34556963b780f266fbdca8c731b70d320a4538cff5dc5457787825719abdbb96a323183203e27b304408efaa70bbfd1c7dea797d47ac3a4c7fb734eba3e65505cec6f2d41be670c8515a0cbba5e87e17489ccde9ea7d97f12ea7841e00a0fc630a964e34dd1eca13642fc8a71458bdc0eaf9c9d253b6d4f65ec7eb6974fed9f540a79d0824f29104f9d186f28cfdecaf75b3fa2a3", 0xd1}, {&(0x7f0000005140)="e767e9c756772b38440056ad3d6ff0348741204c5643368bd67c4f465f756428879da95054c1ff113d", 0x29}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000066b19d0506bfc629149e2d34082e9550d48f422162417c2980fef8792b8ab8a9a7057b0c3622b1c7ea5d144cbf7f05c2c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x98, 0x11}}, {{&(0x7f0000005440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)="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", 0xff}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1cd1dd00003b4ed45305e96ee723d598195bee06033bbc87c85a653b0ee8", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{&(0x7f0000007180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007200)="35371a2ae5ad9c1f2b1c162803eff3ae2402fdb9378b3bd2c3b5f875a520297cae96ff361673d18e062fd4508406d7e3", 0x30}, {&(0x7f0000007240)="fd335f11213e77ea5694770b9c4c2c95ee3c8cfab7369d6d0a5b39e259d51d287cb85c4a57459f4af365004330d3d14444a357e4da0cd678b9f80a7fe6ad726eaf5bd077cb8915e1", 0x48}, {&(0x7f00000072c0)="b890af39cd877fd0a4bf0e21ebdeb540ecf10a31a35b7d25bb81a724d2d3fad622d54f64592c332f98f23474286bbae63e7f6e95287d0ce3fabb41adb745943a543c284dfc7f1ef981cb5e7352e23c79e134b8686a2b1afe3bb3790768e82cdbe6c224bee3c78f626d25f348bbac651b1448bd8f31cb280488025f4ccd7cba", 0x7f}, {&(0x7f0000007340)="dff49aecfdbf4705585e9539c2672ab9aac524c4bb04ec42d131b43abdaac49e539448aa219748196e5d79d1e59b940a8ebfc4f82ba2b51ad19446102dd3dda107a3984ebc360a7423a8886c80fd3a3de205fdc1cf539d499185dacd54ad2b7c85e9ffa4d7222c11c6f38d7123f72f3070169515fbe63c0600e5efb822f24d2dfbde9e4c25a41be6640b7222f0b185cc7e830aba55abc1cb", 0x98}, {&(0x7f0000007400)="09f0be7d7c48774cff996d3225d3e4e06299eb941be6c9efa775184dd265ea48db7aefff68f4bb908e3be9529363bdcf0fb20b808f76096261c4ea868924f30a95f4f170d66dccfbc45f7cf7daeb2decb5fc80f03e20b5c882cf134bb4c4594fbe26a8b63e304d8009e7bf1ae1ca27edf99f5a08968576670dcba3d2e5dfd819769c99c28321058832f4625e9303ed21025887fda0ba7514c14bb27dec1fa7c852c4dd36", 0xa4}, {&(0x7f00000074c0)="e717c9ec341c646966c447565cf7f7c9d341f27070a6ab108b3570792e6f75fc30e36e6c73c865a8aeddbc485b507f83a2363012f4efc6bf6932914d74ddc7704dab88cc744236d43673befad5825f43dcd2ab37c6595e4f610699fc4dd1f8137247474f62f868b86dff43d217529a70f4055ce4c577c41ed84563dd1b68ec2b0d92ff5af25aa9dea440e5fad5acda636aeb5eb3b5dca84544c38f6b9c30c84390e13268aa94ab10d1bfd5e0e27b07102778ea1afe9ffebd00e78b1e", 0xbc}, {&(0x7f0000007580)="7ae2fbb268057f28ecc50aa4642724d459cb8dece17b5c8f826d8133f39731e481f686074c6e305932bb55ef7dce7aec8b31a3303015d79b6cd64edd3e49215e9e3ca323b8d87134db532d6dd925f43d2487101b52ee936831e621ba73ef3ceb91b6d1003a75c80540494d9d9b32d8359ac1ebe75aaf45fa1ae36b8781e6afe5c82dc4cd782c624c40914ece2657029c8b68784e3ee646d77ce563469c9bdd25f89298", 0xa3}, {&(0x7f0000007640)="e901e7bce204d33930d7f6d5419be498f47e4285c2ac6f4f9d3b9915cb2788f58c6b5290fc3d920e8c7f814009783b61f23f9897c7333228d08b79af9090799a19e71b67347514371ab3d3fee58cf434f5f64f1ac17d525c2af25410c0e61c3fd283df209ad2203a3c0993225814ff3a6b6a70c83ff9a4cc1cdf64e706763f75df195e921f8db4830e3a46e3ba718dd6932363c7af4760533b47e750901f280a01058822d2cecd7d6ad727", 0xab}, {&(0x7f0000007700)="6e6c9cca84997ad523185641be2d6fd03634b9bb562a857cc30974b2539f8174d32055a11fb7e6e65f1e54debdcdb54d45eeb3321c1c3bf38522a124f98a78764b644b0a1492562c04d44abf84a23164825a4ab03e412cbaa39392a6f9398509785d56f98d1d2c5c3243af2d08d943ae0eadfe9d2c20420a08c0cf21ded045dd1c77bc4bd4842149b26fd5fccc2dc9d5ed7e97c7760b55c109b58814674b5bc756d3f86949210130c2e6302e261a4535efec9cae644e", 0xb6}], 0x9, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}], 0x20, 0x800}}], 0x5, 0x20040004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) syz_clone3(&(0x7f0000001b00)={0x20000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0xe}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/67, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) [ 808.786058][T30124] RSP: 002b:00007f58ac392168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 23:57:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400080024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 808.786082][T30124] RAX: ffffffffffffffda RBX: 00007f58ab39bf60 RCX: 00007f58ab2890e9 [ 808.786099][T30124] RDX: 00000000200007c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 808.786113][T30124] RBP: 00007f58ac3921d0 R08: 0000000000000000 R09: 0000000000000000 23:57:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 808.786126][T30124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 23:57:17 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)=0x7fff, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1\x00', 0x10) (async) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x2, 0xffffffff, 0x4}, &(0x7f0000000200)=0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0xfffffdc8) connect(r0, &(0x7f0000000140)=@nl=@unspec, 0x80) 23:57:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) [ 808.786137][T30124] R13: 00007fffc662632f R14: 00007f58ac392300 R15: 0000000000022000 23:57:17 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async, rerun: 32) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) r3 = gettid() (async, rerun: 32) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000007000), 0x2, 0x0) (async, rerun: 32) r5 = socket$isdn(0x22, 0x3, 0x11) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r7, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000078c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="ccefe8e073d07cfc259567c32ff510f73b4fc9bcc0c4f29684ef3523b97e5816f20f382bdcd9b66a524b59088213cd636c9bda16412f2e3b72e62cdef72eda7cb0d57b8a7f1cc0fe844875670f88870bf9fca5de8ff6edff8b65842f3834c5085fe1ed6140465541cc0c6429471af027a632596892c67d9a021c4af047902bac3e63e6c7c6be121a70505be0173891efe66e64550b272d511fdb694590d5aeb948b747148ecce395e4f9d8c9c24945c3", 0xb0}, {&(0x7f0000000300)="703c0696ecdbcd55e97254960f3e5e3ca62e425c8f7a99d865382974dbcf92915e349740f990a8fabdd8f263784c542a23254ebe2e8b27d7bd40a256c0be17e200a9349fa699ca0a2ffd8e46954072bbc6630f5400915c390c49cf6098feeba3b394f164510dfc8fb6840858f2fef82b2a09c6605e68a6f05b25c6a52e1d1020aaf0598626b5f78d006630fe9598ac13d09eed9f8562", 0x96}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000180)="32c5038a4a5805dd4afc64387c3c475044e23949445426d89028eeed0aa688830b8a4f25855a98509ca3c9ad3d9b69a4b8afad8c64febcb107357190bca89218aa8229fa3d3a4463105b11fcb9a832954234947faece8846a1365f13e1e811a664a23cee99207d7a7cbbccad130a011e5c550283a79a21ac28", 0x79}, {&(0x7f00000003c0)="d299695a71be2a4377f5316c0072181c5514de6ea21a1a11a93815d7b9f1f6e7b4c19fee08022a27530ebdfba7c38d95ffc69eefbf84451f0b9890c709b511c35109862363f105a9c72cf82742a050fb06455eb3e3a7e73e006d9c2153f5103c6637dcea6388a93806cfe987415e41e33c6c97dc8091873701d02e86de19d2a61e214224079c93d1eda286829aecd100a2f7", 0x92}, {&(0x7f0000000480)="29be93af265fad50735763b6ca81b363b1c9f18e8f95bbab747ee7c3109aa1aa585e5f3ac625f34a521d8a3ac1c03690af8ba5be1102c93ca87342e7024e02a999b01a15f62d18691ff53d74a44e3a2e16092c0f66ea1f368a284fdbf58f561289d89710e9a34e6a076602155dcd761f44897dbeaffb95280ef9e4b25e66ac97a69720a8a0a99eab4c813a14420e43dae99e108b485f8123558a9498948473fe05e33748027988104610601e5708ceaf79a770f666de2147912376ca9ce627d53f2bdca8fe87165aeff227404c22ca93228b765bc0839f7041b8f54659347b7458b496850ff2d744576f81cb747e", 0xee}, {&(0x7f0000000580)="524afd1e852980d398942ef6ab101a43590ece41a29c59ab76d7abd15bc0f77ff0d6184caed3f0fe89850b41f81a073e2ac8f577865acc3fdab80aae8a4039d0cb4e78f56a54812fc62b9cd384505516159ce9949d94f4a68a5bcf137c81c7ac23fa731bd47814cd57717abcf5931c67604e81363e7a47257733f663799ae062ae5df1a93a3ff134b5a39d7f028625ccd1ee7b7a6102ca9a9fb58c4576112ec1a1d45bed03b9fabd493be346d751776e684cde148f", 0xb5}, {&(0x7f0000000640)="686c7daa3ae9153bf37c57c57cf643ddf3246b20756424b2fd4f0a1713075f5924f51033f657e60083a3d2da6b8888730c473c1ebbc5e4ad3334ae70983c9066286cb6e6483c7d9e8007a4430a9a9bd2ed6f4869633df8ecd55ee38de68ede9297e99db5190f0220ed213bc768e43caaa77c1d09843e67debdf044b46d02c8013bf0bc", 0x83}, {&(0x7f0000000700)="a2b1773198deffc7b80d231725a28b0bd1c108cd1ea77c496e53d6e44ddef78cede9e8033f6f163880c6a72d53ccc56aaa8640d321d2c824ec6c310e3bfb705844e658eedd17f1eaefc60c3b44900523f33fc1e924169d84910fbf", 0x5b}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="00fc00403b70c0fec2106d263dde2f404280f8b366f8a3a2090000003a12587636140ce9a472f4bf91af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20000000}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004d00)="2283a3b7ca398246018db5ab4d9d8db05463141da930bb13", 0x18}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004e80)="6d720d73aea7809c9abf0c404114d3a376daa46755e145a159eeb6a2cdd9c8aecb8f2fcc627895bd04312d95b883560ed62f70ba9f2a27", 0x37}, {&(0x7f0000004ec0)="6c28ca863e7fd2", 0x7}, {&(0x7f0000004f00)="9b2e16e9b7eb5b66d57967d9cc6a9d35", 0x10}, {&(0x7f0000004f40)="a0d3f6602d0d07108d64a6c991e2b959429b8d86bb5aa8f908847ba8f58678369496375bcc4a72dcb77b4b0263ec7ccb61ae1d71bf019628fa2173b9d605c8697c22424661dc8654a11561c1e1a9d855ce460b63febd949eeb712bdc42f85d7f6b5a5e19d8b8f99ff59133a21f176494359434cdfc3c7186bea71f29f574c8a57e32d0a77b6e9d2d311d5c1f1169003543d3364269daffcd166b58527cc42434b29b5ffb3904527e9f22b70b2c0dc3228d5c3bb2049397433779703a5d53721cf63eedf1f6aed6aacad0c6538a60480770057e74550a7aa6818359cfea265c13ddd793e242f179f4d026dcd7f9", 0xed}, {&(0x7f0000005040)="432769b1c2c09bc2c25f0cbbb17aa84b52ee03eebe6808c8916a6b8e36c8924dcaa7b65d828d049f3bc524a1c95d6d06bb657bf0ab608e2f4d194746e34556963b780f266fbdca8c731b70d320a4538cff5dc5457787825719abdbb96a323183203e27b304408efaa70bbfd1c7dea797d47ac3a4c7fb734eba3e65505cec6f2d41be670c8515a0cbba5e87e17489ccde9ea7d97f12ea7841e00a0fc630a964e34dd1eca13642fc8a71458bdc0eaf9c9d253b6d4f65ec7eb6974fed9f540a79d0824f29104f9d186f28cfdecaf75b3fa2a3", 0xd1}, {&(0x7f0000005140)="e767e9c756772b38440056ad3d6ff0348741204c5643368bd67c4f465f756428879da95054c1ff113d", 0x29}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000066b19d0506bfc629149e2d34082e9550d48f422162417c2980fef8792b8ab8a9a7057b0c3622b1c7ea5d144cbf7f05c2c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x98, 0x11}}, {{&(0x7f0000005440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)="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", 0xff}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1cd1dd00003b4ed45305e96ee723d598195bee06033bbc87c85a653b0ee8", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{&(0x7f0000007180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007200)="35371a2ae5ad9c1f2b1c162803eff3ae2402fdb9378b3bd2c3b5f875a520297cae96ff361673d18e062fd4508406d7e3", 0x30}, {&(0x7f0000007240)="fd335f11213e77ea5694770b9c4c2c95ee3c8cfab7369d6d0a5b39e259d51d287cb85c4a57459f4af365004330d3d14444a357e4da0cd678b9f80a7fe6ad726eaf5bd077cb8915e1", 0x48}, {&(0x7f00000072c0)="b890af39cd877fd0a4bf0e21ebdeb540ecf10a31a35b7d25bb81a724d2d3fad622d54f64592c332f98f23474286bbae63e7f6e95287d0ce3fabb41adb745943a543c284dfc7f1ef981cb5e7352e23c79e134b8686a2b1afe3bb3790768e82cdbe6c224bee3c78f626d25f348bbac651b1448bd8f31cb280488025f4ccd7cba", 0x7f}, {&(0x7f0000007340)="dff49aecfdbf4705585e9539c2672ab9aac524c4bb04ec42d131b43abdaac49e539448aa219748196e5d79d1e59b940a8ebfc4f82ba2b51ad19446102dd3dda107a3984ebc360a7423a8886c80fd3a3de205fdc1cf539d499185dacd54ad2b7c85e9ffa4d7222c11c6f38d7123f72f3070169515fbe63c0600e5efb822f24d2dfbde9e4c25a41be6640b7222f0b185cc7e830aba55abc1cb", 0x98}, {&(0x7f0000007400)="09f0be7d7c48774cff996d3225d3e4e06299eb941be6c9efa775184dd265ea48db7aefff68f4bb908e3be9529363bdcf0fb20b808f76096261c4ea868924f30a95f4f170d66dccfbc45f7cf7daeb2decb5fc80f03e20b5c882cf134bb4c4594fbe26a8b63e304d8009e7bf1ae1ca27edf99f5a08968576670dcba3d2e5dfd819769c99c28321058832f4625e9303ed21025887fda0ba7514c14bb27dec1fa7c852c4dd36", 0xa4}, {&(0x7f00000074c0)="e717c9ec341c646966c447565cf7f7c9d341f27070a6ab108b3570792e6f75fc30e36e6c73c865a8aeddbc485b507f83a2363012f4efc6bf6932914d74ddc7704dab88cc744236d43673befad5825f43dcd2ab37c6595e4f610699fc4dd1f8137247474f62f868b86dff43d217529a70f4055ce4c577c41ed84563dd1b68ec2b0d92ff5af25aa9dea440e5fad5acda636aeb5eb3b5dca84544c38f6b9c30c84390e13268aa94ab10d1bfd5e0e27b07102778ea1afe9ffebd00e78b1e", 0xbc}, {&(0x7f0000007580)="7ae2fbb268057f28ecc50aa4642724d459cb8dece17b5c8f826d8133f39731e481f686074c6e305932bb55ef7dce7aec8b31a3303015d79b6cd64edd3e49215e9e3ca323b8d87134db532d6dd925f43d2487101b52ee936831e621ba73ef3ceb91b6d1003a75c80540494d9d9b32d8359ac1ebe75aaf45fa1ae36b8781e6afe5c82dc4cd782c624c40914ece2657029c8b68784e3ee646d77ce563469c9bdd25f89298", 0xa3}, {&(0x7f0000007640)="e901e7bce204d33930d7f6d5419be498f47e4285c2ac6f4f9d3b9915cb2788f58c6b5290fc3d920e8c7f814009783b61f23f9897c7333228d08b79af9090799a19e71b67347514371ab3d3fee58cf434f5f64f1ac17d525c2af25410c0e61c3fd283df209ad2203a3c0993225814ff3a6b6a70c83ff9a4cc1cdf64e706763f75df195e921f8db4830e3a46e3ba718dd6932363c7af4760533b47e750901f280a01058822d2cecd7d6ad727", 0xab}, {&(0x7f0000007700)="6e6c9cca84997ad523185641be2d6fd03634b9bb562a857cc30974b2539f8174d32055a11fb7e6e65f1e54debdcdb54d45eeb3321c1c3bf38522a124f98a78764b644b0a1492562c04d44abf84a23164825a4ab03e412cbaa39392a6f9398509785d56f98d1d2c5c3243af2d08d943ae0eadfe9d2c20420a08c0cf21ded045dd1c77bc4bd4842149b26fd5fccc2dc9d5ed7e97c7760b55c109b58814674b5bc756d3f86949210130c2e6302e261a4535efec9cae644e", 0xb6}], 0x9, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}], 0x20, 0x800}}], 0x5, 0x20040004) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) (async) syz_clone3(&(0x7f0000001b00)={0x20000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0xe}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/67, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 23:57:17 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 808.786162][T30124] [ 808.815884][T30124] binder: 30122:30124 ioctl c0306201 200007c0 returned -14 [ 809.014744][T30139] binder: 30136:30139 ioctl c0306201 20001480 returned -14 [ 809.023160][T30139] FAULT_INJECTION: forcing a failure. [ 809.023160][T30139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.023193][T30139] CPU: 0 PID: 30139 Comm: syz-executor.4 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 809.023222][T30139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 809.023237][T30139] Call Trace: [ 809.023244][T30139] [ 809.023252][T30139] dump_stack_lvl+0xcd/0x134 [ 809.023287][T30139] should_fail.cold+0x5/0xa [ 809.023330][T30139] _copy_from_user+0x2a/0x170 [ 809.023358][T30139] binder_thread_write+0x61b/0x3220 [ 809.023412][T30139] ? binder_transaction+0x9ae0/0x9ae0 [ 809.023458][T30139] ? find_held_lock+0x2d/0x110 [ 809.023498][T30139] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 23:57:17 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400090024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 809.023530][T30139] ? binder_debug+0xb2/0x160 [ 809.023553][T30139] ? __traceiter_binder_return+0xa0/0xa0 [ 809.023577][T30139] ? lock_downgrade+0x6e0/0x6e0 [ 809.023637][T30139] binder_ioctl+0x34a0/0x6d80 [ 809.023674][T30139] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 809.023703][T30139] ? tomoyo_path_number_perm+0x24e/0x590 [ 809.023743][T30139] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 809.023780][T30139] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 809.023824][T30139] ? binder_thread_write+0x3220/0x3220 [ 809.023856][T30139] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 809.023887][T30139] ? do_vfs_ioctl+0x132/0x15c0 [ 809.023921][T30139] ? vfs_fileattr_set+0xbe0/0xbe0 [ 809.023978][T30139] ? __fget_files+0x286/0x470 [ 809.024017][T30139] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 809.024049][T30139] ? binder_thread_write+0x3220/0x3220 [ 809.024086][T30139] __x64_sys_ioctl+0x193/0x200 [ 809.024121][T30139] do_syscall_64+0x35/0xb0 [ 809.024149][T30139] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 809.024175][T30139] RIP: 0033:0x7f58ab2890e9 [ 809.024193][T30139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 809.024217][T30139] RSP: 002b:00007f58ac392168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.024240][T30139] RAX: ffffffffffffffda RBX: 00007f58ab39bf60 RCX: 00007f58ab2890e9 23:57:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000a0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:18 executing program 2: r0 = socket$inet(0x2, 0x1, 0x546d25be) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 809.024256][T30139] RDX: 00000000200007c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 809.024272][T30139] RBP: 00007f58ac3921d0 R08: 0000000000000000 R09: 0000000000000000 23:57:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 809.024287][T30139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.024301][T30139] R13: 00007fffc662632f R14: 00007f58ac392300 R15: 0000000000022000 23:57:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:18 executing program 2: r0 = socket$inet(0x2, 0x1, 0x546d25be) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) [ 809.024334][T30139] [ 809.045110][T30139] binder: 30136:30139 ioctl c0306201 200007c0 returned -14 23:57:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x27c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5c}, {0x8, 0x15, 0x7e000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2ad}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x43}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xefa1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x800}}]}, 0x27c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24001bda", @ANYRES16=r3, @ANYBLOB="6f6c00000000000000005500000008000100fe1f008008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000000300), 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18fc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_IES={0x18ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1040, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "193a4a8e9f8c7c7665c0bcd498317cd079d916506fc26338ef07efde24dbfb5b9d2e59543d4ba34d13c89fa8279735b93495"}]}, @NL80211_ATTR_PROBE_RESP={0x4da, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x31a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7f01}, @device_a, @device_a, @random="60c6fe69cc51", {0xc, 0x80}}, 0x7fffffffffffffff, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xb3, 0xf7, 0xf001, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x1, 0x30, 0x5000}}, [{0xdd, 0x14, "21b8398485368f45a30511d0de55f4ee59b37409"}]}}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12da807a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x840}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0xffff590c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x94, 0xac, "3009c2d4bd67f65ca2b1f28519a996ecde27ab4bf8b17512e244229515ee58e06dac2203e587229d14b7d9d753bd61f53e79d1021144caa84019fd9c0e71ced6adbcc0705c28e7968e61f07a629783b326465faa0e7ee3ff6eee2313435e4e785cc1398f5dfb76d79d239a02b53ab3dc0d5fffd2027c25634e68cdd156915ef00c64a4c538df7c21163b133267e63815"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x445}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0xfd58fae69d16d04d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x24000060) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/83, 0x53}], 0x6, 0x7c8, 0x2) 23:57:18 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000b0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 809.283326][T30167] binder: 30162:30167 ioctl c0306201 20001480 returned -14 [ 809.460206][T30180] binder: 30179:30180 ioctl c0306201 20001480 returned -14 23:57:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x27c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5c}, {0x8, 0x15, 0x7e000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2ad}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x43}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xefa1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x800}}]}, 0x27c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24001bda", @ANYRES16=r3, @ANYBLOB="6f6c00000000000000005500000008000100fe1f008008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000000300), 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18fc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_IES={0x18ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1040, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "193a4a8e9f8c7c7665c0bcd498317cd079d916506fc26338ef07efde24dbfb5b9d2e59543d4ba34d13c89fa8279735b93495"}]}, @NL80211_ATTR_PROBE_RESP={0x4da, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x31a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7f01}, @device_a, @device_a, @random="60c6fe69cc51", {0xc, 0x80}}, 0x7fffffffffffffff, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xb3, 0xf7, 0xf001, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x1, 0x30, 0x5000}}, [{0xdd, 0x14, "21b8398485368f45a30511d0de55f4ee59b37409"}]}}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12da807a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x840}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0xffff590c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x94, 0xac, "3009c2d4bd67f65ca2b1f28519a996ecde27ab4bf8b17512e244229515ee58e06dac2203e587229d14b7d9d753bd61f53e79d1021144caa84019fd9c0e71ced6adbcc0705c28e7968e61f07a629783b326465faa0e7ee3ff6eee2313435e4e785cc1398f5dfb76d79d239a02b53ab3dc0d5fffd2027c25634e68cdd156915ef00c64a4c538df7c21163b133267e63815"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x445}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0xfd58fae69d16d04d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x24000060) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/83, 0x53}], 0x6, 0x7c8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x27c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5c}, {0x8, 0x15, 0x7e000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2ad}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x43}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xefa1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x800}}]}, 0x27c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24001bda", @ANYRES16=r3, @ANYBLOB="6f6c00000000000000005500000008000100fe1f008008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000000300), 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18fc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_IES={0x18ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1040, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "193a4a8e9f8c7c7665c0bcd498317cd079d916506fc26338ef07efde24dbfb5b9d2e59543d4ba34d13c89fa8279735b93495"}]}, @NL80211_ATTR_PROBE_RESP={0x4da, 0x91, "4cd23145e59c727123fff89e7a79e633e27cfe38f307213582577b8efad1ac856ec34ca2870aadfa1fbcc2b000f62fb2564a012c9e91788609bdf18f47b909c235d3a7290f149e4d7d75220cf1173f69801deb5270c0e94aa06b59894dfb64c03b5e35c3b878b740db69d84ec4a79f3e9200e0dfb449a87f7b499a9b237b09018d04217794c9e3a0644aa14d9e163ba38902f717574a4748f6fd0705e3ae8f17bb38953d1f115388de6a0d8ae3b72a47d108f31b428f56ec16bce28b9671adc0eb9cb5a4ebcd9f5edeb053302bd70b4a6d914c52d4ef550ee782b649676631ac3abbc13c3fd79003200c35f494881a75d14a34ea0dadc9df14cf71f06737bda34d2b160a2113d8bcc9228fac8510c1367a8e51edf189f02b1a0714afe8a4d0ac3e57f2a259f60999c2058cbf35010c37a5679bd562fb9e5414009da04d4259c5522c029e9243adeb177a9b15943cb6f9058e7e4980bb07b58449a80c3896acf8a04dcb77a65f916d66f6bc6d69498df3cfe7e512925bee36823dae70f624a0b9a7881a387d9e8533fbe830b50c6ddbcacb3d986e627835f1466a2d41c82d3c83d3da9ce79cc8206cd1ce1bf9c59c97a0d4bb0707891a316a9ee43dea0360880d11c2587599f2359f256ef1c90110d3814b5805bb6febd93c64a78184a7b411b0c7105e4153119e81ce83f02a27d2a3a4ff237c9c6a1bceb103917b656439e0c3b802c22d5b80fa4c18fcfcdda72e792d7af53f70cc1ec0fd0241cbc0444361f62147c06a273c188fb7977e796fa47869ddba286c7b7046785b263d7bc724e03112a0c33903bb4fdba0b74eb168ecea815d88e636344e7a3957ce7364a833d402cc36d363e6f22c2ab57de823861fca8e749f85be7ec89514c4e185b63f15cffbb71b896d1c3f550ef245edae6625d7f703a8b5b9c9f6248ff1ed77786f1630109d7267a78201c6b36669771f580796bda1be2c0ca78612c0d82b5768f5295cd3ff097ebf80415a0cd477320291a29e1b0df1a10cbe4172b1e8c00915450b1260866cd09985538b3d8605f4209be2579ab3be28b58b9a59957ed588d3d8b6ea5edc95619cadbea3ac1b111b5e1d8f80b1cbac1d04bdb26c1108fa88934f55ef64ca2f992b3d6b7c9fae5572f7984f8ecf876d9994597d4b00126ee0e5e0a051b2249ff767430b736785911ad204e19ab17c478bd0e7cd9b64ab12a8b6e9268f38ac7492074a0c0a445be77bf8756a694e901d24c5edd61d4732c92cd0c756cb08e66742dfb58862571950a1bab84c4d746352f0eb68ba94690f90e53bf1c0eb2924064747fc77e13c098c020cb5260f359f1cbce7638ab64bfd0e76afb60500370a6c36d36b39f379b79599c0b2821c2cbae51b111b6f77dd4a82e72826325b45a428291faa43746d991975158320d5dd9e1eda3212ba44d2a8b446bc4dd8662b744fa5c57eac072b6399cf4e707057be19e39deab6df28419059fb1ebea59c91742421b6f7f2519280fac48aa323d73abdcfeb081616a8e0472fda19aba90055e0e5aeeca6f8fe1983029907b8844551d5a13c618211bc76f800f67f0be4a553b43e75e650e219b361a7ef50e463540a2dece45e260b090c8627a7c03cd7608b9651884b010566d5deb0439b753fc0a9c30ed4bd4ffc01be7d56cc68df987d5f15268cf4a7b89635215d424e27db4149b10b3d7b9577b0390b7df1ab3f8928db6c7280a2d98fb46bc8e532fcce819475d7902bb59c01"}, @NL80211_ATTR_PROBE_RESP={0x31a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7f01}, @device_a, @device_a, @random="60c6fe69cc51", {0xc, 0x80}}, 0x7fffffffffffffff, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xb3, 0xf7, 0xf001, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x1, 0x30, 0x5000}}, [{0xdd, 0x14, "21b8398485368f45a30511d0de55f4ee59b37409"}]}}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12da807a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x840}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0xffff590c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x94, 0xac, "3009c2d4bd67f65ca2b1f28519a996ecde27ab4bf8b17512e244229515ee58e06dac2203e587229d14b7d9d753bd61f53e79d1021144caa84019fd9c0e71ced6adbcc0705c28e7968e61f07a629783b326465faa0e7ee3ff6eee2313435e4e785cc1398f5dfb76d79d239a02b53ab3dc0d5fffd2027c25634e68cdd156915ef00c64a4c538df7c21163b133267e63815"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x445}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8801) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0xfd58fae69d16d04d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x24000060) (async) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/83, 0x53}], 0x6, 0x7c8, 0x2) (async) [ 810.255363][T30204] binder: 30198:30204 ioctl c0306201 20001480 returned -14 [ 810.433950][T30204] FAULT_INJECTION: forcing a failure. [ 810.433950][T30204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.433985][T30204] CPU: 0 PID: 30204 Comm: syz-executor.4 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 810.434014][T30204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 810.434029][T30204] Call Trace: [ 810.434035][T30204] [ 810.434044][T30204] dump_stack_lvl+0xcd/0x134 [ 810.434078][T30204] should_fail.cold+0x5/0xa [ 810.434123][T30204] _copy_from_user+0x2a/0x170 [ 810.434163][T30204] kstrtouint_from_user+0xa8/0x190 [ 810.434194][T30204] ? kstrtouint+0x120/0x120 [ 810.434235][T30204] ? lock_release+0x780/0x780 [ 810.434280][T30204] proc_fail_nth_write+0x79/0x220 [ 810.434362][T30204] ? proc_task_getattr+0x1f0/0x1f0 [ 810.434412][T30204] ? proc_task_getattr+0x1f0/0x1f0 [ 810.434453][T30204] vfs_write+0x269/0xac0 [ 810.434499][T30204] ksys_write+0x127/0x250 [ 810.434534][T30204] ? __ia32_sys_read+0xb0/0xb0 [ 810.434573][T30204] ? syscall_enter_from_user_mode+0x21/0x70 [ 810.434621][T30204] do_syscall_64+0x35/0xb0 [ 810.434651][T30204] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 810.434678][T30204] RIP: 0033:0x7f58ab23bbff [ 810.434698][T30204] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 810.434722][T30204] RSP: 002b:00007f58ac392160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 810.434746][T30204] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58ab23bbff [ 810.434764][T30204] RDX: 0000000000000001 RSI: 00007f58ac3921e0 RDI: 0000000000000006 [ 810.434780][T30204] RBP: 00007f58ac3921d0 R08: 0000000000000000 R09: 0000000000000000 [ 810.434795][T30204] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 810.434810][T30204] R13: 00007fffc662632f R14: 00007f58ac392300 R15: 0000000000022000 [ 810.434848][T30204] [ 810.821399][T30228] binder: 30219:30228 ioctl c0306201 20001480 returned -14 [ 811.004982][T30240] binder: 30238:30240 ioctl c0306201 20001480 returned -14 [ 811.163175][T30255] binder: 30253:30255 ioctl c0306201 20001480 returned -14 [ 811.177605][T30255] binder: 30253:30255 ioctl 10 200007c0 returned -22 23:57:19 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = gettid() r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000007000), 0x2, 0x0) r5 = socket$isdn(0x22, 0x3, 0x11) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r7, 0x0) sendmmsg$unix(r2, &(0x7f00000078c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="ccefe8e073d07cfc259567c32ff510f73b4fc9bcc0c4f29684ef3523b97e5816f20f382bdcd9b66a524b59088213cd636c9bda16412f2e3b72e62cdef72eda7cb0d57b8a7f1cc0fe844875670f88870bf9fca5de8ff6edff8b65842f3834c5085fe1ed6140465541cc0c6429471af027a632596892c67d9a021c4af047902bac3e63e6c7c6be121a70505be0173891efe66e64550b272d511fdb694590d5aeb948b747148ecce395e4f9d8c9c24945c3", 0xb0}, {&(0x7f0000000300)="703c0696ecdbcd55e97254960f3e5e3ca62e425c8f7a99d865382974dbcf92915e349740f990a8fabdd8f263784c542a23254ebe2e8b27d7bd40a256c0be17e200a9349fa699ca0a2ffd8e46954072bbc6630f5400915c390c49cf6098feeba3b394f164510dfc8fb6840858f2fef82b2a09c6605e68a6f05b25c6a52e1d1020aaf0598626b5f78d006630fe9598ac13d09eed9f8562", 0x96}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000180)="32c5038a4a5805dd4afc64387c3c475044e23949445426d89028eeed0aa688830b8a4f25855a98509ca3c9ad3d9b69a4b8afad8c64febcb107357190bca89218aa8229fa3d3a4463105b11fcb9a832954234947faece8846a1365f13e1e811a664a23cee99207d7a7cbbccad130a011e5c550283a79a21ac28", 0x79}, {&(0x7f00000003c0)="d299695a71be2a4377f5316c0072181c5514de6ea21a1a11a93815d7b9f1f6e7b4c19fee08022a27530ebdfba7c38d95ffc69eefbf84451f0b9890c709b511c35109862363f105a9c72cf82742a050fb06455eb3e3a7e73e006d9c2153f5103c6637dcea6388a93806cfe987415e41e33c6c97dc8091873701d02e86de19d2a61e214224079c93d1eda286829aecd100a2f7", 0x92}, {&(0x7f0000000480)="29be93af265fad50735763b6ca81b363b1c9f18e8f95bbab747ee7c3109aa1aa585e5f3ac625f34a521d8a3ac1c03690af8ba5be1102c93ca87342e7024e02a999b01a15f62d18691ff53d74a44e3a2e16092c0f66ea1f368a284fdbf58f561289d89710e9a34e6a076602155dcd761f44897dbeaffb95280ef9e4b25e66ac97a69720a8a0a99eab4c813a14420e43dae99e108b485f8123558a9498948473fe05e33748027988104610601e5708ceaf79a770f666de2147912376ca9ce627d53f2bdca8fe87165aeff227404c22ca93228b765bc0839f7041b8f54659347b7458b496850ff2d744576f81cb747e", 0xee}, {&(0x7f0000000580)="524afd1e852980d398942ef6ab101a43590ece41a29c59ab76d7abd15bc0f77ff0d6184caed3f0fe89850b41f81a073e2ac8f577865acc3fdab80aae8a4039d0cb4e78f56a54812fc62b9cd384505516159ce9949d94f4a68a5bcf137c81c7ac23fa731bd47814cd57717abcf5931c67604e81363e7a47257733f663799ae062ae5df1a93a3ff134b5a39d7f028625ccd1ee7b7a6102ca9a9fb58c4576112ec1a1d45bed03b9fabd493be346d751776e684cde148f", 0xb5}, {&(0x7f0000000640)="686c7daa3ae9153bf37c57c57cf643ddf3246b20756424b2fd4f0a1713075f5924f51033f657e60083a3d2da6b8888730c473c1ebbc5e4ad3334ae70983c9066286cb6e6483c7d9e8007a4430a9a9bd2ed6f4869633df8ecd55ee38de68ede9297e99db5190f0220ed213bc768e43caaa77c1d09843e67debdf044b46d02c8013bf0bc", 0x83}, {&(0x7f0000000700)="a2b1773198deffc7b80d231725a28b0bd1c108cd1ea77c496e53d6e44ddef78cede9e8033f6f163880c6a72d53ccc56aaa8640d321d2c824ec6c310e3bfb705844e658eedd17f1eaefc60c3b44900523f33fc1e924169d84910fbf", 0x5b}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="00fc00403b70c0fec2106d263dde2f404280f8b366f8a3a2090000003a12587636140ce9a472f4bf91af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20000000}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004d00)="2283a3b7ca398246018db5ab4d9d8db05463141da930bb13", 0x18}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004e80)="6d720d73aea7809c9abf0c404114d3a376daa46755e145a159eeb6a2cdd9c8aecb8f2fcc627895bd04312d95b883560ed62f70ba9f2a27", 0x37}, {&(0x7f0000004ec0)="6c28ca863e7fd2", 0x7}, {&(0x7f0000004f00)="9b2e16e9b7eb5b66d57967d9cc6a9d35", 0x10}, {&(0x7f0000004f40)="a0d3f6602d0d07108d64a6c991e2b959429b8d86bb5aa8f908847ba8f58678369496375bcc4a72dcb77b4b0263ec7ccb61ae1d71bf019628fa2173b9d605c8697c22424661dc8654a11561c1e1a9d855ce460b63febd949eeb712bdc42f85d7f6b5a5e19d8b8f99ff59133a21f176494359434cdfc3c7186bea71f29f574c8a57e32d0a77b6e9d2d311d5c1f1169003543d3364269daffcd166b58527cc42434b29b5ffb3904527e9f22b70b2c0dc3228d5c3bb2049397433779703a5d53721cf63eedf1f6aed6aacad0c6538a60480770057e74550a7aa6818359cfea265c13ddd793e242f179f4d026dcd7f9", 0xed}, {&(0x7f0000005040)="432769b1c2c09bc2c25f0cbbb17aa84b52ee03eebe6808c8916a6b8e36c8924dcaa7b65d828d049f3bc524a1c95d6d06bb657bf0ab608e2f4d194746e34556963b780f266fbdca8c731b70d320a4538cff5dc5457787825719abdbb96a323183203e27b304408efaa70bbfd1c7dea797d47ac3a4c7fb734eba3e65505cec6f2d41be670c8515a0cbba5e87e17489ccde9ea7d97f12ea7841e00a0fc630a964e34dd1eca13642fc8a71458bdc0eaf9c9d253b6d4f65ec7eb6974fed9f540a79d0824f29104f9d186f28cfdecaf75b3fa2a3", 0xd1}, {&(0x7f0000005140)="e767e9c756772b38440056ad3d6ff0348741204c5643368bd67c4f465f756428879da95054c1ff113d", 0x29}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000066b19d0506bfc629149e2d34082e9550d48f422162417c2980fef8792b8ab8a9a7057b0c3622b1c7ea5d144cbf7f05c2c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x98, 0x11}}, {{&(0x7f0000005440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)="760d9b67fbc3ee48b27614fcace5a481bc98e01b5e0ac17d66bccdd601a2f377a5071bf40d581d46922c0034c06d85794017fc9437ce8542d6c6cac33c1ae53e341266ad39f85cb8309bf3efe66771eb88a1ffd0649c54506cdf5f838dc0424fe8da1a992b9da8cbe281dd432c831c5479968f09697a1b54fdf8596fc9dc5dd4c9860a491e20a1aee22b02d60eb91d3735a4bfc2a64e39a392d86a96adc14991fd290215663bc09c5c3745a1425a752db78f9e05f9b03ee380eff0af30b164c640c1d11989ae9b949e6b2c80e705fb8c63ea8c7047105e5df9a45d4ba2e2685c99f12b87de6607ddad370a104fe08c613b57c1c0ef000fc683afceaa6b5cd8", 0xff}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1cd1dd00003b4ed45305e96ee723d598195bee06033bbc87c85a653b0ee8", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{&(0x7f0000007180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007200)="35371a2ae5ad9c1f2b1c162803eff3ae2402fdb9378b3bd2c3b5f875a520297cae96ff361673d18e062fd4508406d7e3", 0x30}, {&(0x7f0000007240)="fd335f11213e77ea5694770b9c4c2c95ee3c8cfab7369d6d0a5b39e259d51d287cb85c4a57459f4af365004330d3d14444a357e4da0cd678b9f80a7fe6ad726eaf5bd077cb8915e1", 0x48}, {&(0x7f00000072c0)="b890af39cd877fd0a4bf0e21ebdeb540ecf10a31a35b7d25bb81a724d2d3fad622d54f64592c332f98f23474286bbae63e7f6e95287d0ce3fabb41adb745943a543c284dfc7f1ef981cb5e7352e23c79e134b8686a2b1afe3bb3790768e82cdbe6c224bee3c78f626d25f348bbac651b1448bd8f31cb280488025f4ccd7cba", 0x7f}, {&(0x7f0000007340)="dff49aecfdbf4705585e9539c2672ab9aac524c4bb04ec42d131b43abdaac49e539448aa219748196e5d79d1e59b940a8ebfc4f82ba2b51ad19446102dd3dda107a3984ebc360a7423a8886c80fd3a3de205fdc1cf539d499185dacd54ad2b7c85e9ffa4d7222c11c6f38d7123f72f3070169515fbe63c0600e5efb822f24d2dfbde9e4c25a41be6640b7222f0b185cc7e830aba55abc1cb", 0x98}, {&(0x7f0000007400)="09f0be7d7c48774cff996d3225d3e4e06299eb941be6c9efa775184dd265ea48db7aefff68f4bb908e3be9529363bdcf0fb20b808f76096261c4ea868924f30a95f4f170d66dccfbc45f7cf7daeb2decb5fc80f03e20b5c882cf134bb4c4594fbe26a8b63e304d8009e7bf1ae1ca27edf99f5a08968576670dcba3d2e5dfd819769c99c28321058832f4625e9303ed21025887fda0ba7514c14bb27dec1fa7c852c4dd36", 0xa4}, {&(0x7f00000074c0)="e717c9ec341c646966c447565cf7f7c9d341f27070a6ab108b3570792e6f75fc30e36e6c73c865a8aeddbc485b507f83a2363012f4efc6bf6932914d74ddc7704dab88cc744236d43673befad5825f43dcd2ab37c6595e4f610699fc4dd1f8137247474f62f868b86dff43d217529a70f4055ce4c577c41ed84563dd1b68ec2b0d92ff5af25aa9dea440e5fad5acda636aeb5eb3b5dca84544c38f6b9c30c84390e13268aa94ab10d1bfd5e0e27b07102778ea1afe9ffebd00e78b1e", 0xbc}, {&(0x7f0000007580)="7ae2fbb268057f28ecc50aa4642724d459cb8dece17b5c8f826d8133f39731e481f686074c6e305932bb55ef7dce7aec8b31a3303015d79b6cd64edd3e49215e9e3ca323b8d87134db532d6dd925f43d2487101b52ee936831e621ba73ef3ceb91b6d1003a75c80540494d9d9b32d8359ac1ebe75aaf45fa1ae36b8781e6afe5c82dc4cd782c624c40914ece2657029c8b68784e3ee646d77ce563469c9bdd25f89298", 0xa3}, {&(0x7f0000007640)="e901e7bce204d33930d7f6d5419be498f47e4285c2ac6f4f9d3b9915cb2788f58c6b5290fc3d920e8c7f814009783b61f23f9897c7333228d08b79af9090799a19e71b67347514371ab3d3fee58cf434f5f64f1ac17d525c2af25410c0e61c3fd283df209ad2203a3c0993225814ff3a6b6a70c83ff9a4cc1cdf64e706763f75df195e921f8db4830e3a46e3ba718dd6932363c7af4760533b47e750901f280a01058822d2cecd7d6ad727", 0xab}, {&(0x7f0000007700)="6e6c9cca84997ad523185641be2d6fd03634b9bb562a857cc30974b2539f8174d32055a11fb7e6e65f1e54debdcdb54d45eeb3321c1c3bf38522a124f98a78764b644b0a1492562c04d44abf84a23164825a4ab03e412cbaa39392a6f9398509785d56f98d1d2c5c3243af2d08d943ae0eadfe9d2c20420a08c0cf21ded045dd1c77bc4bd4842149b26fd5fccc2dc9d5ed7e97c7760b55c109b58814674b5bc756d3f86949210130c2e6302e261a4535efec9cae644e", 0xb6}], 0x9, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}], 0x20, 0x800}}], 0x5, 0x20040004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) syz_clone3(&(0x7f0000001b00)={0x20000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0xe}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/67, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) getpid() (async) sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) (async) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) gettid() (async) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000007000), 0x2, 0x0) (async) socket$isdn(0x22, 0x3, 0x11) (async) socket$netlink(0x10, 0x3, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async) lchown(&(0x7f0000000340)='./bus\x00', r7, 0x0) (async) sendmmsg$unix(r2, &(0x7f00000078c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="ccefe8e073d07cfc259567c32ff510f73b4fc9bcc0c4f29684ef3523b97e5816f20f382bdcd9b66a524b59088213cd636c9bda16412f2e3b72e62cdef72eda7cb0d57b8a7f1cc0fe844875670f88870bf9fca5de8ff6edff8b65842f3834c5085fe1ed6140465541cc0c6429471af027a632596892c67d9a021c4af047902bac3e63e6c7c6be121a70505be0173891efe66e64550b272d511fdb694590d5aeb948b747148ecce395e4f9d8c9c24945c3", 0xb0}, {&(0x7f0000000300)="703c0696ecdbcd55e97254960f3e5e3ca62e425c8f7a99d865382974dbcf92915e349740f990a8fabdd8f263784c542a23254ebe2e8b27d7bd40a256c0be17e200a9349fa699ca0a2ffd8e46954072bbc6630f5400915c390c49cf6098feeba3b394f164510dfc8fb6840858f2fef82b2a09c6605e68a6f05b25c6a52e1d1020aaf0598626b5f78d006630fe9598ac13d09eed9f8562", 0x96}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000180)="32c5038a4a5805dd4afc64387c3c475044e23949445426d89028eeed0aa688830b8a4f25855a98509ca3c9ad3d9b69a4b8afad8c64febcb107357190bca89218aa8229fa3d3a4463105b11fcb9a832954234947faece8846a1365f13e1e811a664a23cee99207d7a7cbbccad130a011e5c550283a79a21ac28", 0x79}, {&(0x7f00000003c0)="d299695a71be2a4377f5316c0072181c5514de6ea21a1a11a93815d7b9f1f6e7b4c19fee08022a27530ebdfba7c38d95ffc69eefbf84451f0b9890c709b511c35109862363f105a9c72cf82742a050fb06455eb3e3a7e73e006d9c2153f5103c6637dcea6388a93806cfe987415e41e33c6c97dc8091873701d02e86de19d2a61e214224079c93d1eda286829aecd100a2f7", 0x92}, {&(0x7f0000000480)="29be93af265fad50735763b6ca81b363b1c9f18e8f95bbab747ee7c3109aa1aa585e5f3ac625f34a521d8a3ac1c03690af8ba5be1102c93ca87342e7024e02a999b01a15f62d18691ff53d74a44e3a2e16092c0f66ea1f368a284fdbf58f561289d89710e9a34e6a076602155dcd761f44897dbeaffb95280ef9e4b25e66ac97a69720a8a0a99eab4c813a14420e43dae99e108b485f8123558a9498948473fe05e33748027988104610601e5708ceaf79a770f666de2147912376ca9ce627d53f2bdca8fe87165aeff227404c22ca93228b765bc0839f7041b8f54659347b7458b496850ff2d744576f81cb747e", 0xee}, {&(0x7f0000000580)="524afd1e852980d398942ef6ab101a43590ece41a29c59ab76d7abd15bc0f77ff0d6184caed3f0fe89850b41f81a073e2ac8f577865acc3fdab80aae8a4039d0cb4e78f56a54812fc62b9cd384505516159ce9949d94f4a68a5bcf137c81c7ac23fa731bd47814cd57717abcf5931c67604e81363e7a47257733f663799ae062ae5df1a93a3ff134b5a39d7f028625ccd1ee7b7a6102ca9a9fb58c4576112ec1a1d45bed03b9fabd493be346d751776e684cde148f", 0xb5}, {&(0x7f0000000640)="686c7daa3ae9153bf37c57c57cf643ddf3246b20756424b2fd4f0a1713075f5924f51033f657e60083a3d2da6b8888730c473c1ebbc5e4ad3334ae70983c9066286cb6e6483c7d9e8007a4430a9a9bd2ed6f4869633df8ecd55ee38de68ede9297e99db5190f0220ed213bc768e43caaa77c1d09843e67debdf044b46d02c8013bf0bc", 0x83}, {&(0x7f0000000700)="a2b1773198deffc7b80d231725a28b0bd1c108cd1ea77c496e53d6e44ddef78cede9e8033f6f163880c6a72d53ccc56aaa8640d321d2c824ec6c310e3bfb705844e658eedd17f1eaefc60c3b44900523f33fc1e924169d84910fbf", 0x5b}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="00fc00403b70c0fec2106d263dde2f404280f8b366f8a3a2090000003a12587636140ce9a472f4bf91af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20000000}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004d00)="2283a3b7ca398246018db5ab4d9d8db05463141da930bb13", 0x18}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004e80)="6d720d73aea7809c9abf0c404114d3a376daa46755e145a159eeb6a2cdd9c8aecb8f2fcc627895bd04312d95b883560ed62f70ba9f2a27", 0x37}, {&(0x7f0000004ec0)="6c28ca863e7fd2", 0x7}, {&(0x7f0000004f00)="9b2e16e9b7eb5b66d57967d9cc6a9d35", 0x10}, {&(0x7f0000004f40)="a0d3f6602d0d07108d64a6c991e2b959429b8d86bb5aa8f908847ba8f58678369496375bcc4a72dcb77b4b0263ec7ccb61ae1d71bf019628fa2173b9d605c8697c22424661dc8654a11561c1e1a9d855ce460b63febd949eeb712bdc42f85d7f6b5a5e19d8b8f99ff59133a21f176494359434cdfc3c7186bea71f29f574c8a57e32d0a77b6e9d2d311d5c1f1169003543d3364269daffcd166b58527cc42434b29b5ffb3904527e9f22b70b2c0dc3228d5c3bb2049397433779703a5d53721cf63eedf1f6aed6aacad0c6538a60480770057e74550a7aa6818359cfea265c13ddd793e242f179f4d026dcd7f9", 0xed}, {&(0x7f0000005040)="432769b1c2c09bc2c25f0cbbb17aa84b52ee03eebe6808c8916a6b8e36c8924dcaa7b65d828d049f3bc524a1c95d6d06bb657bf0ab608e2f4d194746e34556963b780f266fbdca8c731b70d320a4538cff5dc5457787825719abdbb96a323183203e27b304408efaa70bbfd1c7dea797d47ac3a4c7fb734eba3e65505cec6f2d41be670c8515a0cbba5e87e17489ccde9ea7d97f12ea7841e00a0fc630a964e34dd1eca13642fc8a71458bdc0eaf9c9d253b6d4f65ec7eb6974fed9f540a79d0824f29104f9d186f28cfdecaf75b3fa2a3", 0xd1}, {&(0x7f0000005140)="e767e9c756772b38440056ad3d6ff0348741204c5643368bd67c4f465f756428879da95054c1ff113d", 0x29}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000066b19d0506bfc629149e2d34082e9550d48f422162417c2980fef8792b8ab8a9a7057b0c3622b1c7ea5d144cbf7f05c2c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x98, 0x11}}, {{&(0x7f0000005440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)="760d9b67fbc3ee48b27614fcace5a481bc98e01b5e0ac17d66bccdd601a2f377a5071bf40d581d46922c0034c06d85794017fc9437ce8542d6c6cac33c1ae53e341266ad39f85cb8309bf3efe66771eb88a1ffd0649c54506cdf5f838dc0424fe8da1a992b9da8cbe281dd432c831c5479968f09697a1b54fdf8596fc9dc5dd4c9860a491e20a1aee22b02d60eb91d3735a4bfc2a64e39a392d86a96adc14991fd290215663bc09c5c3745a1425a752db78f9e05f9b03ee380eff0af30b164c640c1d11989ae9b949e6b2c80e705fb8c63ea8c7047105e5df9a45d4ba2e2685c99f12b87de6607ddad370a104fe08c613b57c1c0ef000fc683afceaa6b5cd8", 0xff}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1cd1dd00003b4ed45305e96ee723d598195bee06033bbc87c85a653b0ee8", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{&(0x7f0000007180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007200)="35371a2ae5ad9c1f2b1c162803eff3ae2402fdb9378b3bd2c3b5f875a520297cae96ff361673d18e062fd4508406d7e3", 0x30}, {&(0x7f0000007240)="fd335f11213e77ea5694770b9c4c2c95ee3c8cfab7369d6d0a5b39e259d51d287cb85c4a57459f4af365004330d3d14444a357e4da0cd678b9f80a7fe6ad726eaf5bd077cb8915e1", 0x48}, {&(0x7f00000072c0)="b890af39cd877fd0a4bf0e21ebdeb540ecf10a31a35b7d25bb81a724d2d3fad622d54f64592c332f98f23474286bbae63e7f6e95287d0ce3fabb41adb745943a543c284dfc7f1ef981cb5e7352e23c79e134b8686a2b1afe3bb3790768e82cdbe6c224bee3c78f626d25f348bbac651b1448bd8f31cb280488025f4ccd7cba", 0x7f}, {&(0x7f0000007340)="dff49aecfdbf4705585e9539c2672ab9aac524c4bb04ec42d131b43abdaac49e539448aa219748196e5d79d1e59b940a8ebfc4f82ba2b51ad19446102dd3dda107a3984ebc360a7423a8886c80fd3a3de205fdc1cf539d499185dacd54ad2b7c85e9ffa4d7222c11c6f38d7123f72f3070169515fbe63c0600e5efb822f24d2dfbde9e4c25a41be6640b7222f0b185cc7e830aba55abc1cb", 0x98}, {&(0x7f0000007400)="09f0be7d7c48774cff996d3225d3e4e06299eb941be6c9efa775184dd265ea48db7aefff68f4bb908e3be9529363bdcf0fb20b808f76096261c4ea868924f30a95f4f170d66dccfbc45f7cf7daeb2decb5fc80f03e20b5c882cf134bb4c4594fbe26a8b63e304d8009e7bf1ae1ca27edf99f5a08968576670dcba3d2e5dfd819769c99c28321058832f4625e9303ed21025887fda0ba7514c14bb27dec1fa7c852c4dd36", 0xa4}, {&(0x7f00000074c0)="e717c9ec341c646966c447565cf7f7c9d341f27070a6ab108b3570792e6f75fc30e36e6c73c865a8aeddbc485b507f83a2363012f4efc6bf6932914d74ddc7704dab88cc744236d43673befad5825f43dcd2ab37c6595e4f610699fc4dd1f8137247474f62f868b86dff43d217529a70f4055ce4c577c41ed84563dd1b68ec2b0d92ff5af25aa9dea440e5fad5acda636aeb5eb3b5dca84544c38f6b9c30c84390e13268aa94ab10d1bfd5e0e27b07102778ea1afe9ffebd00e78b1e", 0xbc}, {&(0x7f0000007580)="7ae2fbb268057f28ecc50aa4642724d459cb8dece17b5c8f826d8133f39731e481f686074c6e305932bb55ef7dce7aec8b31a3303015d79b6cd64edd3e49215e9e3ca323b8d87134db532d6dd925f43d2487101b52ee936831e621ba73ef3ceb91b6d1003a75c80540494d9d9b32d8359ac1ebe75aaf45fa1ae36b8781e6afe5c82dc4cd782c624c40914ece2657029c8b68784e3ee646d77ce563469c9bdd25f89298", 0xa3}, {&(0x7f0000007640)="e901e7bce204d33930d7f6d5419be498f47e4285c2ac6f4f9d3b9915cb2788f58c6b5290fc3d920e8c7f814009783b61f23f9897c7333228d08b79af9090799a19e71b67347514371ab3d3fee58cf434f5f64f1ac17d525c2af25410c0e61c3fd283df209ad2203a3c0993225814ff3a6b6a70c83ff9a4cc1cdf64e706763f75df195e921f8db4830e3a46e3ba718dd6932363c7af4760533b47e750901f280a01058822d2cecd7d6ad727", 0xab}, {&(0x7f0000007700)="6e6c9cca84997ad523185641be2d6fd03634b9bb562a857cc30974b2539f8174d32055a11fb7e6e65f1e54debdcdb54d45eeb3321c1c3bf38522a124f98a78764b644b0a1492562c04d44abf84a23164825a4ab03e412cbaa39392a6f9398509785d56f98d1d2c5c3243af2d08d943ae0eadfe9d2c20420a08c0cf21ded045dd1c77bc4bd4842149b26fd5fccc2dc9d5ed7e97c7760b55c109b58814674b5bc756d3f86949210130c2e6302e261a4535efec9cae644e", 0xb6}], 0x9, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}], 0x20, 0x800}}], 0x5, 0x20040004) (async) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) (async) syz_clone3(&(0x7f0000001b00)={0x20000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0xe}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/67, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) (async) 23:57:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000c0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:19 executing program 2: r0 = socket$inet(0x2, 0x1, 0x546d25be) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='team0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) connect(r0, &(0x7f0000000200)=@nl=@unspec, 0x80) 23:57:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x40086602, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x27c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5c}, {0x8, 0x15, 0x7e000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2ad}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x43}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xefa1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x800}}]}, 0x27c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24001bda", @ANYRES16=r3, @ANYBLOB="6f6c00000000000000005500000008000100fe1f008008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000000300), 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18fc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_IES={0x18ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1040, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "193a4a8e9f8c7c7665c0bcd498317cd079d916506fc26338ef07efde24dbfb5b9d2e59543d4ba34d13c89fa8279735b93495"}]}, @NL80211_ATTR_PROBE_RESP={0x4da, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x31a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7f01}, @device_a, @device_a, @random="60c6fe69cc51", {0xc, 0x80}}, 0x7fffffffffffffff, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xb3, 0xf7, 0xf001, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x1, 0x30, 0x5000}}, [{0xdd, 0x14, "21b8398485368f45a30511d0de55f4ee59b37409"}]}}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12da807a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x840}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0xffff590c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x94, 0xac, "3009c2d4bd67f65ca2b1f28519a996ecde27ab4bf8b17512e244229515ee58e06dac2203e587229d14b7d9d753bd61f53e79d1021144caa84019fd9c0e71ced6adbcc0705c28e7968e61f07a629783b326465faa0e7ee3ff6eee2313435e4e785cc1398f5dfb76d79d239a02b53ab3dc0d5fffd2027c25634e68cdd156915ef00c64a4c538df7c21163b133267e63815"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x445}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0xfd58fae69d16d04d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x24000060) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/83, 0x53}], 0x6, 0x7c8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x27c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5c}, {0x8, 0x15, 0x7e000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2ad}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x43}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xefa1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x800}}]}, 0x27c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24001bda", @ANYRES16=r3, @ANYBLOB="6f6c00000000000000005500000008000100fe1f008008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000000300), 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18fc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_IES={0x18ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1040, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "ed7b060c593736e2b95c4237579d30494d8b32536f97038f878bf86f22eaa12d17889153c2df292450f8861062cb390413614f82d5e5373474c14d00c8517b53d99cd367b0f4b6aa848b891407dd65c4fd6c5231872e7b1e8a2d75365281f4247af2c21b0b55add61815d7bd32207e94ef2e25ebcf43a39e17bd0ca2b6512792eb29f7917dd8bc504880ea49208adcef24b00f706094105da2da82b1fc21a1d079e058cd0445c49f1d1c3b3de1e82636b944c8c2a70155ae12cdde0da9ab52547d12898f26c8482451bbb6a6cfb15a0594bbb288a9d34254ac4bb9e4055b084371b7c743c9db682d2944d6149bbf0753802a843373afacdf04df6189f6e7fbde7a6f17e92b2c190e4be4ef89b44cbabb436816d480aac7b52fe9636ab727accb8b84f5e561c51df3d889d936d400df11884c3de98523abef6f65d7d75d9e13d25951009225fc7d614919adc8ae0ac1f151f2b4ef0449eb4f263a2e3976fe102bdc9081145aaa6810ce09fdd26601d4d2b6d5d1c9faacbb73a5fa66557ef286101f99cdf13d1502c7e27a25e43bffad55a777b4c0e50f5163a437fb6a7424a8c06eb580a86a8ac2338ff7834f6abf7f629627f0ec2fc58fabc479f39fae6d0595ad7585cae02b3167a2c47f42dc62d67ab5918d37abb63969403ccec2798d8576f16ad047583cb6419bbe797213557256899f8109e713a779eafe91e43445f2dc3337480e0ba73ebb8cd60b52e85c4ee0178e794ccaa3804e1706c1efdb82d9dc749ecda0566458cafe9fba6175864448454d2bba211b0479a3aa4810f212b36baa79badb41ee051da27c546a88fce60644e2bfb7d641014cbe9185f47bea66af6d57fe0e273a2ca4ab687186d6a7475eb70fe4f0ab5d3aef9bc67820bc072fec5b472994a823d10c6c2c0ac921b8f699716e1ca2d7744a76882f7aed35b65386f17adf65b49cb9d5ee2d4b0248dae8a62cc1e607d7e6a94c61042ed6d15fe4fa555942fc41dd9ca7c19c3626bf2c01f5c4d360540d83ca4925ae67369403f5c1a3ad220b0f670682e92a85ef4c567ca92700db30dc689a591b1d6f7694b526ec36e26d864eacb2c596253c73cc5b7bac20fbf9ef10615550886be3b4fd3ab0cbf2a01d9f1513c7d10aceac91a136876e982726777498b90515b884c0bd7ecab5000d90f49689492ebe7abee4d0fa6634962fad2e8aeecd0afd03064b5183db61755ccceae4ef504d31ad1b3a4036a5aa17832c7fb8efef5b8d0fd329ad8373d3e3adf445b5c850137875fd4d209c18b8399831afb75413407144036767358b50eb7201429f54d6948f35f829f7f7a7a478a66ae3ae9febe00f1c66c2015805c436add540b23ff677565ed794d8a6329ad027223da8fd5042a128f2b518463d218e91c49d6a0f4aacc34b92a23541589c39586d081b60caaab9e495f913f516eb5fa7a945ba9e9c29519f6dda351317bc1327ce9d4cde58773e8ac4eae1d2f12921a6c6d91a41c8f81408adc017d4b4665d80d7c9564e7c080dd890261e26ad79d9686e7eb42bd954c38f2b97152fd45455811678083e03332c505ef329c3d69a6bde3eb8d5c9a95ae00855eea8a064f2efeea8968d643e6853f29df7bc1a121a48e52482e411b9eefa487048aff2cbb8200e681660ba42f4bec185ef5fd408c331f374739dbd71b5bdc6ae8b644e3bcf32aa2ad784a0a09425152974145ea615fb77b4921eda44974880a23d6949b6bdd41a9d819eed2f923ece7f949b07928de2fabbca617a09bd6eacf2136d0edfaf90ab349b12b586d3dc3e38c85988c74a1719bd22a4d536b8d805e7ded4fc9c43ad45af802b63eafd2e7f763f3a190e6c1555230f7ae885191375b08417e2c7b5fc81fad45de58aeea67b3e42c30c965713808ce7305cd1653292c7dd7c9ad0d47ab4984ae74e84f5723305bf4d3c1c0b36c2086524bb039a5868c32b4fa56ff79665cd4e192b1932c5c4bd5328586c57920d8ebea955364836ff833e2d4488aa416f5c981a9d16cfa77e082dc67aa7cbc5b002fe9faae8016e7ca655eac6089ef3de22ff616bc76eb9c312000f3fafb02cfe940ec7d4eed142414f6aaaba09be9828f66c810e35d1a71baa50c0dc1c996ac85f534aef00a8073c1ba030b4c0cb2613a9731e74ba7b0171145a49f95ecb2191eed3f0e9491509d46730c0012c40f081fc6bc190b545d53ec7e937dac1d2f0838662c022db415c06134fe56cb3de933893cc0ccb2b2742052bc8ca55045647c11f65e4a8914e39391e74831ca9d0b08088a848fb078a4ac88cdbd393852f7c23f953e88478d595e00d3bd365f82f33045f54437c3242241d53a4fd40ce909d5c3fe890e2232e3a7384d427ddbec9d86ad6e40d265d4321c726a164dbbd6113afee11c3f4f2d95ed3161e5d9bcefc4ddc280a3ca3dd1551cd70cf18c060737c3197f8c80bc5a8760eb2baa174319f9fd4952272063c42c4df380c85bcd451a4bcaadb7d3bfd301a17645a428c953ca7d2dfc00e8ce3be6a8c2c7b743978f1bf9a8746308f2a7741b0fd79a885c891754b697274917d6f2b33487b8f671628b7a4131b460628fec6777c3132ed9795ed8e04254ff0b41a0fdc9aaf5778fa96d84f02f44616889ad4341999d7aa0494027b5d321b6a7b6d8c720278fc4b67c0e96ea22d7d7eb4df8f32a660d76fd633752ca425b7d382a6550b204855e1d10e855714da3dc99646b7d4a16b87c5f6cb1298309ccd1bd1caaa79b548e1bd35d14965510740de8c90d6e9a5a23c35b03816abfad55f48e9640c6492635a79a704bf55414cc5403d357e15f9bf7587b8f6d94a80b123e23d8a6d3362db120dcbc4ac2d933f78a84e7341481d66510e6715c00155c478930aa5af23452bd4ea585aedaad17f6af68e523b10e216427dd76bd0e29ae9b1f8fee43b54b10cb85835f4900a5930476363c0b07a9df2359826af50ae1195297cd8cf1971c83c0e4f87015e4de24e145098bc562b7ccb64174420a982c221690191890ce98e629236752526f04f4e1b647f8542f4a3c27a298b5741e6da64bd32c4891e571cdd3a9941c6b6fc8e64489314dfac695a05b409c06546182421a568f1d84ce39d6cc08c1b3d8d31fe14455f690b03c8ee38658a8de552d20d99024868d65863c47835c2652d5b0fffe35ad71e7f451aa066c853a9da091ea985c9f8826253d2baf6004318555218321094471078fdf10889b8d1d6a42f8211a065d5ec703b67ea82410f707ac5ae1219b96a6d6978c542a3c6a2e6a63615b40e22480cdf20ace0fbd7a3f1549d68da62f476a175f2ed0f5280eaf7d5c9252ccb3684a5289fe98723af0aeaca6cfb898fd026acf2e77dcb0ac9a38c2fd43d0ef0dbf70e034983a7f104dc0804bb31c8f3b09378d33a096237e75bc7eb708f63c4df99d4aab88b70322a905242fc5501206ae6308b019a884fcbd22e2f55ba21de55fcad24bb4719b17eaf9f98b5490d6a372e03c50d657c7416c4211eb9eb64197ec1cdf57e0641ea83cc4a7754f4ff8a18b628f809ffc49ce70cf5db59ff35b6b7dc7e738a6562f5479a622f321ef9e74f5f3e3a37f53d41bcf60f2bed82b5002b6512baf1b23aea47eda220098089527ef165c359e00a26b7f1478626bf847161a2cf7ace0b299d1c6ea7a6fb78627a4e607d8af5196b55838f99ca9e1d19fe4431010ea854c8225f4cafa3025c64a47485f8e770bc4fd8311720abcbc1bf0222dbcc5b162ca99ff421fd79d9a5bc79e6694a4a132c99ea6edc48d9e6551a7aebaf77b427eb161a8f1d4f57f5cac0ab2743598525557ea6cb5040a3f10dea2a9c43b54afcc9d7969e53d48c7c3708352eedb9045038127dc9c3d0481a776a766cc9b80faf9bc80eab8cea470e09397f7efe460fea21c9bb140f248c5d2e59bdbddc3f464f25ddff3529d2abd7e7647d49cbbb2adde56b17fe0700a84856409e5041388a1dd461fdcdd8349c5dec97fa5f95711682dfeb9f75d5d3f5f2161a8b9be7c8be261d5840e91d1ea29525a3df487f2214946e71f2f0c649b1c5a5fe2c72d0c2d15caf106c999be4ece3d12eae4655a9fe00b1de80f336f0de2614fdc97a61f5334f5a3f90e7a192e55adddb786c9044442158cf7041dbc7348e8eb3dfc1f2496bf6f427708d5f31e541c0b80ef18c246aa1363d960487f2197d2295f62fcd6bf86ead782db0b51aac9e7a9cbb5148359dc8c7d4a03a2a83a8ca8a27e32d3cf00287f82a175ad1c78b7ae36b1b0ae49cf21911d2b06973775ad772cd191952a9fe9a5a53f34b675220e25e4ec4a3ee6841e0d874a9d164582866f9c5b97af7f07772f697e9c69da0b5f255c178cd530745f09a4978c2eef6ed87c10515bb2c8bef1cc4ca6f6cc04c27e9f1a13342c3dfd1beeaba404cdef878a2cbdc5abbc6f3ac79f764b88d52f57bcfbe8d4e8bb10bfac699f0cc63a8c7d26f98d15a14580f9bb03a9c256e9656f95faf677cbbe0244e135981f7822f27b8a5de4e3c1b3c0a134f4af6ecdee981c3adf108023f3f7d3e846249aa00262ad0035bbffd40f29acdbf69589de3b32af576e1c70a7c27b4dbb5bd85aa45d060e66e5e7cbf961da44cc97167c8c137a35d4e86030e4d7886042e21e299f4a2aaaee1945e56ca8298c4de2f2b62ceb9ca6d24971df55c72d7ce5418001e438b0a432ecd89eb075938640ab76f13fca5f1d45f6e2ff4a733fc41af857460ad96e6ba2d5ccb2d418562b6e1b8a8f405ac3605f6c1418313023b7510e57fdf7e904caa5543ae5f0f82092ef79ceaef691f8ad05f0748262677f1d192e50f62c08dfb3ed20f5ddd8fc43b28ce2897bea4974524be069331ef856e927b9bda11fb428b4910793b0263839f4a6c6c9a6a14a1d1bdde48be97bc3d519f81c03ce7b3279a4669ac1d7bd20210daed94cee246e5130da132090552e9f09b7e9eea4cd3d392510973aa416b715b0335f54d6d4bd7b6bac349d7e94fdb62c5a599e1a9a4896c32eb0265c40196e37cf856926ff92588ec6f9aa24fe3eeec3afa1bc630e9c1d2478fba8e4dc2c76b457bcd46b1d45e38a9bdcb88db343df6012cde58a93d804ebb5f87525d3098368339da9dce327522609e9878d612dd787cc7b36912687c060d77c4da5ad6bc00d6d064d9ca46d0b12f08a407524d78c3ea076b45bb53c247f0c925c1c21e16ee64c72acfd5006043ed9393882a3096092bc218a159ad9b84cde5c41b4f5d7a748b56460b46d14869753ab2ac7ec542545e3526ace6480c197488bba3795eb0eacb96e679c939a9a36905f6faa92cdefcd774de61318b0db882a6738c1d5d6285a1d51ac459e22acdf10170ef652290c06f5db6eccf9c72905b991286f22659eeb1109b85c092254d1a24f404a5037fd467df4200929623f58b472e97e2417ebbaca453b8a9e414b6492956c50a7576a3210201778c823444a6073a8b1ff9d889c07394a71ae1e1dd9c4262969fd5b79c65a51b739170dd2304f4fcef4258aba256abf21637cb32e92ba594b937ccad8b54efd1831c565013e0fc928f0eab86ddcea2767e42614497a75ff91969f61a589ee93b8b7c6ce71b714a5fc1c9b0934deae46b0da605e3a07b8e26472f5199f08571d52589d71ef2bfb8e911bc00ce714bfa1f161606d3dd797cd0e2c9f050817db0a548395735e7757962d38a6d6806cbff0b9c06c8d031778839a47ca2ccf4013daf2bbf9b6e73dd6a3c7353e9c1db2ddbf72100706e2f6fa457a9423077f870724c8239e82c6cb6c64170d7a71459c1fcad254677a93197"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "193a4a8e9f8c7c7665c0bcd498317cd079d916506fc26338ef07efde24dbfb5b9d2e59543d4ba34d13c89fa8279735b93495"}]}, @NL80211_ATTR_PROBE_RESP={0x4da, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x31a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7f01}, @device_a, @device_a, @random="60c6fe69cc51", {0xc, 0x80}}, 0x7fffffffffffffff, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xb3, 0xf7, 0xf001, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x1, 0x30, 0x5000}}, [{0xdd, 0x14, "21b8398485368f45a30511d0de55f4ee59b37409"}]}}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12da807a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x840}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0xffff590c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x94, 0xac, "3009c2d4bd67f65ca2b1f28519a996ecde27ab4bf8b17512e244229515ee58e06dac2203e587229d14b7d9d753bd61f53e79d1021144caa84019fd9c0e71ced6adbcc0705c28e7968e61f07a629783b326465faa0e7ee3ff6eee2313435e4e785cc1398f5dfb76d79d239a02b53ab3dc0d5fffd2027c25634e68cdd156915ef00c64a4c538df7c21163b133267e63815"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x445}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8801) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0xfd58fae69d16d04d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x24000060) (async) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/83, 0x53}], 0x6, 0x7c8, 0x2) (async) 23:57:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e00), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e40)={0x27c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x5c}, {0x8, 0x15, 0x7e000000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x2ad}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x11, 0x8400}, {0x8, 0x15, 0x43}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xefa1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0xfff9}, {0x8, 0x15, 0x800}}]}, 0x27c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24001bda", @ANYRES16=r3, @ANYBLOB="6f6c00000000000000005500000008000100fe1f008008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000001c80)={&(0x7f0000000300), 0xc, &(0x7f0000001c40)={&(0x7f0000000340)={0x18fc, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_IES={0x18ac, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x1040, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x36, 0x3, "193a4a8e9f8c7c7665c0bcd498317cd079d916506fc26338ef07efde24dbfb5b9d2e59543d4ba34d13c89fa8279735b93495"}]}, @NL80211_ATTR_PROBE_RESP={0x4da, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x31a, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x65, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x7f01}, @device_a, @device_a, @random="60c6fe69cc51", {0xc, 0x80}}, 0x7fffffffffffffff, @default, 0x100, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x7c}, @val={0x4, 0x6, {0xb3, 0xf7, 0xf001, 0x3}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x8}}, @val={0x76, 0x6, {0x7, 0x1, 0x30, 0x5000}}, [{0xdd, 0x14, "21b8398485368f45a30511d0de55f4ee59b37409"}]}}]]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5ba}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x12da807a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xdd}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x840}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r7, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r8}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={0x108, r3, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffff, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0xffff590c}}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x94, 0xac, "3009c2d4bd67f65ca2b1f28519a996ecde27ab4bf8b17512e244229515ee58e06dac2203e587229d14b7d9d753bd61f53e79d1021144caa84019fd9c0e71ced6adbcc0705c28e7968e61f07a629783b326465faa0e7ee3ff6eee2313435e4e785cc1398f5dfb76d79d239a02b53ab3dc0d5fffd2027c25634e68cdd156915ef00c64a4c538df7c21163b133267e63815"}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x445}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x401}]}, 0x108}, 0x1, 0x0, 0x0, 0x40080}, 0x8801) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x20, 0x0, 0xfd58fae69d16d04d, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x68, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x68}, 0x1, 0x0, 0x0, 0x44}, 0x24000060) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/83, 0x53}], 0x6, 0x7c8, 0x2) 23:57:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000e0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 812.023160][T30271] binder: 30264:30271 ioctl c0306201 20001480 returned -14 [ 812.023853][T30271] binder: 30264:30271 ioctl 541b 200007c0 returned -22 23:57:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, r1, 0x0) 23:57:19 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000f0024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 812.106067][T30278] binder: 30275:30278 ioctl c0306201 20001480 returned -14 [ 812.427591][T30292] __nla_validate_parse: 5 callbacks suppressed [ 812.427613][T30292] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 812.553849][T30298] binder: 30294:30298 ioctl c0306201 20001480 returned -14 23:57:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:20 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = gettid() r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000007000), 0x2, 0x0) r5 = socket$isdn(0x22, 0x3, 0x11) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r7, 0x0) sendmmsg$unix(r2, &(0x7f00000078c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="ccefe8e073d07cfc259567c32ff510f73b4fc9bcc0c4f29684ef3523b97e5816f20f382bdcd9b66a524b59088213cd636c9bda16412f2e3b72e62cdef72eda7cb0d57b8a7f1cc0fe844875670f88870bf9fca5de8ff6edff8b65842f3834c5085fe1ed6140465541cc0c6429471af027a632596892c67d9a021c4af047902bac3e63e6c7c6be121a70505be0173891efe66e64550b272d511fdb694590d5aeb948b747148ecce395e4f9d8c9c24945c3", 0xb0}, {&(0x7f0000000300)="703c0696ecdbcd55e97254960f3e5e3ca62e425c8f7a99d865382974dbcf92915e349740f990a8fabdd8f263784c542a23254ebe2e8b27d7bd40a256c0be17e200a9349fa699ca0a2ffd8e46954072bbc6630f5400915c390c49cf6098feeba3b394f164510dfc8fb6840858f2fef82b2a09c6605e68a6f05b25c6a52e1d1020aaf0598626b5f78d006630fe9598ac13d09eed9f8562", 0x96}, {&(0x7f0000001b80)="403811249b66a9a5bb43049a20c6582d904286b97464ada9007a611d9871934d3f2c116457ac6f2bd3beb2ba715563e8fad4c663a3b4e30f49be8eff9c1237b018e9860ff82aeef241759c51747a8d88d8bcf62a2e3da095a3775bbdf96f65cf1baf2b176d8a4a82c8b151dce2d74d64355b779ab2a946958ce9689b8867662ec22cd01810419b26d23115f6c2a7e9be19dc463fd9054fc8060530174456786b191f28bf909cfdd436942bd1d31b880f228e13ac65554b20da15dd01ebb065713234b20183f383318b84a90599fb0165247019874193481a9b1598937776d71f2e0e5bc61db5c2ac0f5d3ddc47a5cd39181937d60a7400dc23f9e3099b26af6588c7c0bce11336e8e8f3c80c266f04d5c7dae8de1483471c763740293087898822a039c2093d216d6ef311e60dce954ccc9743047490d74c048a280506cb5ee6fbc83732ff7eca253f77f900e5c9f12edef26636e574b56d0e0274219ae9e19d1160c7ef27d31b308b9177e7227e9f9d03e1b88bf95beb8ac81ef31ee84601947f25821ecd0b12d95b09846bb8d257aebfedd80f7bf60861e4e44c86471e8800f7abcc2cae3d5b5af0335650f3ae9b0840c8d97176d8b18ca01a2a10cbace44a5867514b50fbc688267102b9cf409ad7c5c943f060bf9ab173e714239e7160398e994ce819d2f17db1db0f293c7233af129286a81b48d8e8face8bc9041e630ddb6edaf6eded74a911c3a07cd3a555adf4ce5d002e9cda9af83cf35a695f7b4ea52873e7c9b736db0eda894d25bf3d0e907a9337ba34672b34ce527a8cfe29ba1271c56014943ac7a68ab0ddfc93cbc417f95ed0df124e6812dffd5c7d927e3267f017019d8e1970b1129c94e7f21772e098193b54d47c1babedaf0f58b6cbdeca14460f376986bf497bd964734c2efb69458926d2b11b5c97ea09207eef82709745fdd03969e94ad78136c101d5a761bdeed5fa694fd2ffd24bf050bf587db7b86ce046fbc05a7a3df1f60ce7191019a6d00203f5979152718f0c8a20366e5c0395e15332fbe56ce389ded6ca87307a16d4d925ee689af882e2f3537fb4dd4dcf3b511644181c0f7c26a05fe48c2d859bef1b3f4c390d4fbfeec48b2d391687e1a6d0e0f4b2ce661fa1418c556ac4a0bfbfafb47a12d1d1f1a76d01c4fdde6c1cec41b0ec7de0778871aa991f593741d44a47d0d514715ec189934c04acf9548cd7b53fe415fb365bdbec23cb8268460d50ce2b84e4ab8fa7f13ccc1b717b3912195a23797642eb0fbcd3bcdded0298750e18ba9f0fb58a497181df30d13329c3a17888a49dd75bd491ebefe9701e6163fd7ce344eed7f74c4ba2d0aae272b8c184defdcd857f5e91493213cf5ff6819970f7d9a1e74b23983010df52e8ae8f3f28eed00e0770ec5cf6fac55d78e42d4adca55c4a3b5dca51300f25f552882725e20187634ac38b2bd933e7021bbd1e15a8acc7eff6a4bc29a6366b0bc8d686eded3b6c3b13c134c0c1a893cbc710dc50259731a08e63414e33c4e0feb6a4533a0ca7c8866c8f83ac00d0aa73f8adf1fea2945cf8c565db45143aafb8836713b0af4134bd4abe8221610667f1595aed23e9d8e4dcbeb0f4734f35558346d10d6e803798e2bac0ba6a313f628c597f0bb4a6511457e1a176b961375fba07a815093b6e2d4edad75c14fa4f7e73fb964a232272579bf305e93ad1ed688168a285527aff1a725e5f880ae8df8ac3c2555350dbc032d14aa12a4b40598bc99b3dc095df7f2f4228a6949e7295842b81e317d5c84ec1812a6407d7661679b4dfe87b7348addec63485344c87f110fa9cb44515fbdc6bd6354995d61c2af34080d3758bf5efa8884a70e2ae20b31d841be27c57eff03003cc6533c3cd4bc9c9392414723179c92c86fb47ca2c0a8f682f30ba281332963021641266a054505f51457c2c50b9d97514d4e202e5731e3be6090303ccee8d6dcb997d71e6ec33a008e13c93f3cacd97aa24cf96b5dc8ac048e790cc1e34b2aab48cb261d832035f6ac59bf8f6563e91385829e864fb56b9f2487d5f500b4442c03998e5a846532b6c502322d861566d972961c526f4b8eae9afafd620a583fe1eee077a47b5fbfb3efb676caafe3aa81435b0e71ffc3678cc33b3ceae991f3ef8b2ef062051c5565faba7b94d51f35e59853899c25500e9d3414c79f02cf2cd9e2cd17fef579cf36d5475caf3f8aaf05694dbdf092ff95236016de682ce918fd36e0913beff060632ab21a545bfff3774b9c229be92a841ad676ff0178ec4048a504c77da52ffe2f056559d299b95e1f4ac90ec9987576c1c705b25d817a9cf19d1fd8938517ee7116df6f03e382aa02fff5a3e1979b8fbb1e532612b246a5cfaeb72035b95da40649b229d74e6bb1e3a3739b33282a6fc0c5cc43d8c524f03f7149e3e2313b3da2005f92ca185c98f00425afaec1038ad855a730dfbbd3d151d8b9db0fa7b78ffbcf71e300db8873ebfd85838b9a941547b49b00ebebf561c498aef111e7eb73d21e13cee3ddbe8fa1654c7ea569ec5c1eda9cec92ca4ede66342c00a872bd6698c5993c6790a9e512c2736ba5f791a5e48c0a5508b26caf59181df1b3894f9948ff6964c66b210b935680d7ba8432b87e94a80eaf40641299c7c9028403847882a29dbb89ef655f88abe9dd368ea4d9c96366c517a9572cb2b8983ad168dc7d73f92fb501580a0f340fb7f1d3c56d59ac98ec4e5e16e3cf60662c3288ae243f220c55764dbf451f05742b69f0eeafd09711fc336cf0b17dc834c9ed90882e1f841898814f765c764d7d91684b1424e9ae32409c61b2ef394287eb440e620b1418fc1ee66d7c854e73aed22528c853cc0e74dc43c64bf633cca723a316abd08ac1a1641a664fc518e747373540d7538a9869e418dfa811ea933ae3a7030a9c9311110cca72b82118410c507e6ff3f16c0193c2fb46bfc09bd3f33a17d705a75585ab02d504ec6cfde2a4268fe186f0dc5c843c545e686f1096b256e2dcd6e998a329104cd3ce7649aafd415537e41211aca76a3cbe490c3f4245c3e8c2b05debbf10c0060492485c85f06698ddc0fdffed8ac787e1fa6107461490e3e1d425c0845eb3409a4e0a6b0afc98c81ba3324f15990b66ff39ff9db41a4b990f20dcdee60c6bcedd164ec0b89143838615feefe689daf612ca035e135d5624fd52f296007d91447fe45ce229383bdcdba9f1c6226c223198b42254fd3adf07de867c6a05b09ea39221fde9d7403256cb311b91508df54cef8b4ff48a313b19667c04f59af80cae213c3111feb8ea8268069574e8c851dc76469982e10ad750262773fd2b7376c3c6df33bc995986c5a27b2aef1a20abeeb0fa4e219691a53877dcfad2ea604310220cf80075d320fc4cb922f8634005b307129cdc8dd6fdf9c7e54abae735e3c1cd683e1f01b5b169d064663277c965c8c86141a17493f22a122d6a46ff46ff9df31305f45dc6ec5b78148ca4653c6d62910e60a422c40f2cdb902bc4f1b354854654998839adf78227b40aa6324cc173782433017950dc14fc528372e9064eec4e2cc9375ddb5f39fa5abcaf3efcbbff6b63b3cd58557ab47b0fe913c287d27ff0ddc337d92894dfe67e67137bf1f3fba443afc61ea12dd2def9509fb9e91f44b34c019d722ba9763d8b65b337db846e61006573a9da0cf8f4632aae7107aebf590b950d21c320002879e37261f7c73d1fcd12f063bd0c9d617305ec907e4b023e86133568cdc6e60fdb67833cce8922c843f78b4b697a2406e94c4419701a786b382adde8de456dedc9515c4eaa312a819df402124bcd987f77c9fbdd8aae6aa5255f34559b23e3a102f9b6cb2b9b4e0652239cb6a4b9c93251bd3fcd8579312107580ba174293700edb1d86c6bf012ce4293dbce0d86ba3275afb9b70252d615c080c8f1efe9a9e5fa5260fda09e30d6af240f5bfecf310e102b40fdf24d564d65debeb9e12d8667bd5f0ebccdeed1b9e07b875214b1a3f0c35d5d1fe7c0d111f31458676234a3e8ddd9372984df220eb69a14eac84096d930117620d9200452bdf29ebbd5a6d8a2e6294d0aa34937737b60924800cafe9694d3f93300ab596f0da6ea30a603d7de8d04567a95cb3a9d8e7a9d76a3e72d6214c0f27b497caa5ef955e64425ebd23a9c6e350c6b5c90cef4bb1be8b03e7b8551c67cdfb56df7f9c55a9d6b990160039a66d41c89695f64f346f5d5fad3abb09be5d4271e4bcd5afe52a96fe7a0f672554a208fd3387053bde3d5d2af6df12c4ba8991e503dcd7afc5195817f77572e98b817732ccb1b376761f56ce40a0bc7403141b7fd4e8143eca371d6484a37559ab4907d6b54de64ae1a0182b90df926938240b2015325264378b5254996e957fb799f99e16b48f554f49db9337731067c40b24d68612d4ed7fdf7f04a024af185df5072ecc88b68067b4af4269a21e88bf9fbd4ed133a1546b339baecd0b17cfda84feb370c4f9d0ed3c59b6e78e2c13f1cbe4f99da8e76af1bfcc9101a14a8d7c808cdffa7ddbac47cffb0411ee045553adf4cab2aa59c6401ecdf08b056e578d4387496e27dc50cc5be4a683672e309870752679ba7d57838bfb39cd0e377282f12a2a041040152899e02ea1bb7efcea963909a5ba3b88e9bccb4280d5bca7da7e7334f7abf6b7efe73e15f07e6cee884959211977030969bb78080c7ab1ec0f70c7d534b44e377895a2680017c8902da8215e69c75e5bcb9cb75abf00ee6e86bfeacb2141167ba2f36b2ac03d96ef7b52091ecb78109761de67d92ed6d2b58ed4e62eba947cc72d759e6bf8b005b2cc6dd42b03305e136c5353c11bd01ef378ab6c9b3becd2a80ce055e7c80d184ca4ac837bc081e32b1673b37d00261c09a6636432ecbd94510c3f6b519b6e344ca4df8d1edf40a8bbd5328d56729c1c67ea2457285e29e210d0659edaa0756fbc96207491fe0518b6bf6f6545e3014fff760019d1d9229265015af53aaca4308481aaa6c1f5aaffd6738cdc3fecc56544df3b5ceed2b1aa873aa848cf29392ad80fa779ca1377474b60c5a0ce2cf1b8135cca11f0b70fc63778c61a2542c8846f4951e2ab910a6333620f941d77683d1d3335a655e66f033d9928c6ae39d2c5a8f817a4eda7f9f0dc95fb0b62a032262170f384d5cf7fee86b7b7ada87aea4ad5caaa54ba17cfd247fe4ada220e6d0ab1fbd3438979e97b40b4857fe3a0ae39561884cb81cd8e5009345f34ee565d8dd0e59e4a99304fd63274f106eaf0108ee015cb3aea44c1aa13308b440c754a879241ab0d5aa696c110708475f6f99024dc07a772295bff7d4d446b136ce6b7444a4195d3e456f8d506f319264cd30f1440cb5bf9b679c08c8324cdebf7dcf731ad040d8aa13ed15646a56f90ee2df01ab9f2d3060e992c77eba50798d4d59890b71b96f0e8f2efc814a6446c24365a225083d1f08aab35674ac27400e8347a3a0761747ce6bcd21f8ccd433d35d8f66428b36c3e4b0f21f7edfa646b4683f6799f276c4b9b999db1e0c3d310fce00c21af6bca159e4cd38957412fc0ba232bd75a46917f886e65064adda1b2db3ad7fe375a1d32ad51d74546dc6be03fe38f1cc015034fedc3e409f3fd9f8af52cec4c0822eebd161140e73711dccb34c1c2c61db5fbfaf47ec188d889cef63cbc7bfd53ff16d7118a05aa2e63c34690c617849c877343ae152da78a2e9953db79ff04e9f6c41193663923eb79a6972673ef19bba42f8de5730e1198c3901e86661044d68c922b6ae1e7", 0x1000}, {&(0x7f0000000180)="32c5038a4a5805dd4afc64387c3c475044e23949445426d89028eeed0aa688830b8a4f25855a98509ca3c9ad3d9b69a4b8afad8c64febcb107357190bca89218aa8229fa3d3a4463105b11fcb9a832954234947faece8846a1365f13e1e811a664a23cee99207d7a7cbbccad130a011e5c550283a79a21ac28", 0x79}, {&(0x7f00000003c0)="d299695a71be2a4377f5316c0072181c5514de6ea21a1a11a93815d7b9f1f6e7b4c19fee08022a27530ebdfba7c38d95ffc69eefbf84451f0b9890c709b511c35109862363f105a9c72cf82742a050fb06455eb3e3a7e73e006d9c2153f5103c6637dcea6388a93806cfe987415e41e33c6c97dc8091873701d02e86de19d2a61e214224079c93d1eda286829aecd100a2f7", 0x92}, {&(0x7f0000000480)="29be93af265fad50735763b6ca81b363b1c9f18e8f95bbab747ee7c3109aa1aa585e5f3ac625f34a521d8a3ac1c03690af8ba5be1102c93ca87342e7024e02a999b01a15f62d18691ff53d74a44e3a2e16092c0f66ea1f368a284fdbf58f561289d89710e9a34e6a076602155dcd761f44897dbeaffb95280ef9e4b25e66ac97a69720a8a0a99eab4c813a14420e43dae99e108b485f8123558a9498948473fe05e33748027988104610601e5708ceaf79a770f666de2147912376ca9ce627d53f2bdca8fe87165aeff227404c22ca93228b765bc0839f7041b8f54659347b7458b496850ff2d744576f81cb747e", 0xee}, {&(0x7f0000000580)="524afd1e852980d398942ef6ab101a43590ece41a29c59ab76d7abd15bc0f77ff0d6184caed3f0fe89850b41f81a073e2ac8f577865acc3fdab80aae8a4039d0cb4e78f56a54812fc62b9cd384505516159ce9949d94f4a68a5bcf137c81c7ac23fa731bd47814cd57717abcf5931c67604e81363e7a47257733f663799ae062ae5df1a93a3ff134b5a39d7f028625ccd1ee7b7a6102ca9a9fb58c4576112ec1a1d45bed03b9fabd493be346d751776e684cde148f", 0xb5}, {&(0x7f0000000640)="686c7daa3ae9153bf37c57c57cf643ddf3246b20756424b2fd4f0a1713075f5924f51033f657e60083a3d2da6b8888730c473c1ebbc5e4ad3334ae70983c9066286cb6e6483c7d9e8007a4430a9a9bd2ed6f4869633df8ecd55ee38de68ede9297e99db5190f0220ed213bc768e43caaa77c1d09843e67debdf044b46d02c8013bf0bc", 0x83}, {&(0x7f0000000700)="a2b1773198deffc7b80d231725a28b0bd1c108cd1ea77c496e53d6e44ddef78cede9e8033f6f163880c6a72d53ccc56aaa8640d321d2c824ec6c310e3bfb705844e658eedd17f1eaefc60c3b44900523f33fc1e924169d84910fbf", 0x5b}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="00fc00403b70c0fec2106d263dde2f404280f8b366f8a3a2090000003a12587636140ce9a472f4bf91af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20000000}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004d00)="2283a3b7ca398246018db5ab4d9d8db05463141da930bb13", 0x18}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004e80)="6d720d73aea7809c9abf0c404114d3a376daa46755e145a159eeb6a2cdd9c8aecb8f2fcc627895bd04312d95b883560ed62f70ba9f2a27", 0x37}, {&(0x7f0000004ec0)="6c28ca863e7fd2", 0x7}, {&(0x7f0000004f00)="9b2e16e9b7eb5b66d57967d9cc6a9d35", 0x10}, {&(0x7f0000004f40)="a0d3f6602d0d07108d64a6c991e2b959429b8d86bb5aa8f908847ba8f58678369496375bcc4a72dcb77b4b0263ec7ccb61ae1d71bf019628fa2173b9d605c8697c22424661dc8654a11561c1e1a9d855ce460b63febd949eeb712bdc42f85d7f6b5a5e19d8b8f99ff59133a21f176494359434cdfc3c7186bea71f29f574c8a57e32d0a77b6e9d2d311d5c1f1169003543d3364269daffcd166b58527cc42434b29b5ffb3904527e9f22b70b2c0dc3228d5c3bb2049397433779703a5d53721cf63eedf1f6aed6aacad0c6538a60480770057e74550a7aa6818359cfea265c13ddd793e242f179f4d026dcd7f9", 0xed}, {&(0x7f0000005040)="432769b1c2c09bc2c25f0cbbb17aa84b52ee03eebe6808c8916a6b8e36c8924dcaa7b65d828d049f3bc524a1c95d6d06bb657bf0ab608e2f4d194746e34556963b780f266fbdca8c731b70d320a4538cff5dc5457787825719abdbb96a323183203e27b304408efaa70bbfd1c7dea797d47ac3a4c7fb734eba3e65505cec6f2d41be670c8515a0cbba5e87e17489ccde9ea7d97f12ea7841e00a0fc630a964e34dd1eca13642fc8a71458bdc0eaf9c9d253b6d4f65ec7eb6974fed9f540a79d0824f29104f9d186f28cfdecaf75b3fa2a3", 0xd1}, {&(0x7f0000005140)="e767e9c756772b38440056ad3d6ff0348741204c5643368bd67c4f465f756428879da95054c1ff113d", 0x29}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000066b19d0506bfc629149e2d34082e9550d48f422162417c2980fef8792b8ab8a9a7057b0c3622b1c7ea5d144cbf7f05c2c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x98, 0x11}}, {{&(0x7f0000005440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)="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", 0xff}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1cd1dd00003b4ed45305e96ee723d598195bee06033bbc87c85a653b0ee8", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{&(0x7f0000007180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007200)="35371a2ae5ad9c1f2b1c162803eff3ae2402fdb9378b3bd2c3b5f875a520297cae96ff361673d18e062fd4508406d7e3", 0x30}, {&(0x7f0000007240)="fd335f11213e77ea5694770b9c4c2c95ee3c8cfab7369d6d0a5b39e259d51d287cb85c4a57459f4af365004330d3d14444a357e4da0cd678b9f80a7fe6ad726eaf5bd077cb8915e1", 0x48}, {&(0x7f00000072c0)="b890af39cd877fd0a4bf0e21ebdeb540ecf10a31a35b7d25bb81a724d2d3fad622d54f64592c332f98f23474286bbae63e7f6e95287d0ce3fabb41adb745943a543c284dfc7f1ef981cb5e7352e23c79e134b8686a2b1afe3bb3790768e82cdbe6c224bee3c78f626d25f348bbac651b1448bd8f31cb280488025f4ccd7cba", 0x7f}, {&(0x7f0000007340)="dff49aecfdbf4705585e9539c2672ab9aac524c4bb04ec42d131b43abdaac49e539448aa219748196e5d79d1e59b940a8ebfc4f82ba2b51ad19446102dd3dda107a3984ebc360a7423a8886c80fd3a3de205fdc1cf539d499185dacd54ad2b7c85e9ffa4d7222c11c6f38d7123f72f3070169515fbe63c0600e5efb822f24d2dfbde9e4c25a41be6640b7222f0b185cc7e830aba55abc1cb", 0x98}, {&(0x7f0000007400)="09f0be7d7c48774cff996d3225d3e4e06299eb941be6c9efa775184dd265ea48db7aefff68f4bb908e3be9529363bdcf0fb20b808f76096261c4ea868924f30a95f4f170d66dccfbc45f7cf7daeb2decb5fc80f03e20b5c882cf134bb4c4594fbe26a8b63e304d8009e7bf1ae1ca27edf99f5a08968576670dcba3d2e5dfd819769c99c28321058832f4625e9303ed21025887fda0ba7514c14bb27dec1fa7c852c4dd36", 0xa4}, {&(0x7f00000074c0)="e717c9ec341c646966c447565cf7f7c9d341f27070a6ab108b3570792e6f75fc30e36e6c73c865a8aeddbc485b507f83a2363012f4efc6bf6932914d74ddc7704dab88cc744236d43673befad5825f43dcd2ab37c6595e4f610699fc4dd1f8137247474f62f868b86dff43d217529a70f4055ce4c577c41ed84563dd1b68ec2b0d92ff5af25aa9dea440e5fad5acda636aeb5eb3b5dca84544c38f6b9c30c84390e13268aa94ab10d1bfd5e0e27b07102778ea1afe9ffebd00e78b1e", 0xbc}, {&(0x7f0000007580)="7ae2fbb268057f28ecc50aa4642724d459cb8dece17b5c8f826d8133f39731e481f686074c6e305932bb55ef7dce7aec8b31a3303015d79b6cd64edd3e49215e9e3ca323b8d87134db532d6dd925f43d2487101b52ee936831e621ba73ef3ceb91b6d1003a75c80540494d9d9b32d8359ac1ebe75aaf45fa1ae36b8781e6afe5c82dc4cd782c624c40914ece2657029c8b68784e3ee646d77ce563469c9bdd25f89298", 0xa3}, {&(0x7f0000007640)="e901e7bce204d33930d7f6d5419be498f47e4285c2ac6f4f9d3b9915cb2788f58c6b5290fc3d920e8c7f814009783b61f23f9897c7333228d08b79af9090799a19e71b67347514371ab3d3fee58cf434f5f64f1ac17d525c2af25410c0e61c3fd283df209ad2203a3c0993225814ff3a6b6a70c83ff9a4cc1cdf64e706763f75df195e921f8db4830e3a46e3ba718dd6932363c7af4760533b47e750901f280a01058822d2cecd7d6ad727", 0xab}, {&(0x7f0000007700)="6e6c9cca84997ad523185641be2d6fd03634b9bb562a857cc30974b2539f8174d32055a11fb7e6e65f1e54debdcdb54d45eeb3321c1c3bf38522a124f98a78764b644b0a1492562c04d44abf84a23164825a4ab03e412cbaa39392a6f9398509785d56f98d1d2c5c3243af2d08d943ae0eadfe9d2c20420a08c0cf21ded045dd1c77bc4bd4842149b26fd5fccc2dc9d5ed7e97c7760b55c109b58814674b5bc756d3f86949210130c2e6302e261a4535efec9cae644e", 0xb6}], 0x9, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}], 0x20, 0x800}}], 0x5, 0x20040004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) syz_clone3(&(0x7f0000001b00)={0x20000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0xe}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/67, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 23:57:20 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400100024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:20 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) close_range(r0, r1, 0x0) [ 812.798211][T30304] binder: 30303:30304 ioctl c0306201 20001480 returned -14 23:57:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x40186366, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400110024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) (async) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r0, r1, 0x0) 23:57:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400600024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) [ 813.940803][T30322] binder: BINDER_SET_CONTEXT_MGR already set [ 813.940816][T30322] binder: 30319:30322 ioctl 40046207 0 returned -16 [ 813.941127][T30322] binder: 30319:30322 ioctl c0306201 20001480 returned -14 23:57:21 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = gettid() r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000007000), 0x2, 0x0) r5 = socket$isdn(0x22, 0x3, 0x11) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r7, 0x0) sendmmsg$unix(r2, &(0x7f00000078c0)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000240)="ccefe8e073d07cfc259567c32ff510f73b4fc9bcc0c4f29684ef3523b97e5816f20f382bdcd9b66a524b59088213cd636c9bda16412f2e3b72e62cdef72eda7cb0d57b8a7f1cc0fe844875670f88870bf9fca5de8ff6edff8b65842f3834c5085fe1ed6140465541cc0c6429471af027a632596892c67d9a021c4af047902bac3e63e6c7c6be121a70505be0173891efe66e64550b272d511fdb694590d5aeb948b747148ecce395e4f9d8c9c24945c3", 0xb0}, {&(0x7f0000000300)="703c0696ecdbcd55e97254960f3e5e3ca62e425c8f7a99d865382974dbcf92915e349740f990a8fabdd8f263784c542a23254ebe2e8b27d7bd40a256c0be17e200a9349fa699ca0a2ffd8e46954072bbc6630f5400915c390c49cf6098feeba3b394f164510dfc8fb6840858f2fef82b2a09c6605e68a6f05b25c6a52e1d1020aaf0598626b5f78d006630fe9598ac13d09eed9f8562", 0x96}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000180)="32c5038a4a5805dd4afc64387c3c475044e23949445426d89028eeed0aa688830b8a4f25855a98509ca3c9ad3d9b69a4b8afad8c64febcb107357190bca89218aa8229fa3d3a4463105b11fcb9a832954234947faece8846a1365f13e1e811a664a23cee99207d7a7cbbccad130a011e5c550283a79a21ac28", 0x79}, {&(0x7f00000003c0)="d299695a71be2a4377f5316c0072181c5514de6ea21a1a11a93815d7b9f1f6e7b4c19fee08022a27530ebdfba7c38d95ffc69eefbf84451f0b9890c709b511c35109862363f105a9c72cf82742a050fb06455eb3e3a7e73e006d9c2153f5103c6637dcea6388a93806cfe987415e41e33c6c97dc8091873701d02e86de19d2a61e214224079c93d1eda286829aecd100a2f7", 0x92}, {&(0x7f0000000480)="29be93af265fad50735763b6ca81b363b1c9f18e8f95bbab747ee7c3109aa1aa585e5f3ac625f34a521d8a3ac1c03690af8ba5be1102c93ca87342e7024e02a999b01a15f62d18691ff53d74a44e3a2e16092c0f66ea1f368a284fdbf58f561289d89710e9a34e6a076602155dcd761f44897dbeaffb95280ef9e4b25e66ac97a69720a8a0a99eab4c813a14420e43dae99e108b485f8123558a9498948473fe05e33748027988104610601e5708ceaf79a770f666de2147912376ca9ce627d53f2bdca8fe87165aeff227404c22ca93228b765bc0839f7041b8f54659347b7458b496850ff2d744576f81cb747e", 0xee}, {&(0x7f0000000580)="524afd1e852980d398942ef6ab101a43590ece41a29c59ab76d7abd15bc0f77ff0d6184caed3f0fe89850b41f81a073e2ac8f577865acc3fdab80aae8a4039d0cb4e78f56a54812fc62b9cd384505516159ce9949d94f4a68a5bcf137c81c7ac23fa731bd47814cd57717abcf5931c67604e81363e7a47257733f663799ae062ae5df1a93a3ff134b5a39d7f028625ccd1ee7b7a6102ca9a9fb58c4576112ec1a1d45bed03b9fabd493be346d751776e684cde148f", 0xb5}, {&(0x7f0000000640)="686c7daa3ae9153bf37c57c57cf643ddf3246b20756424b2fd4f0a1713075f5924f51033f657e60083a3d2da6b8888730c473c1ebbc5e4ad3334ae70983c9066286cb6e6483c7d9e8007a4430a9a9bd2ed6f4869633df8ecd55ee38de68ede9297e99db5190f0220ed213bc768e43caaa77c1d09843e67debdf044b46d02c8013bf0bc", 0x83}, {&(0x7f0000000700)="a2b1773198deffc7b80d231725a28b0bd1c108cd1ea77c496e53d6e44ddef78cede9e8033f6f163880c6a72d53ccc56aaa8640d321d2c824ec6c310e3bfb705844e658eedd17f1eaefc60c3b44900523f33fc1e924169d84910fbf", 0x5b}], 0x9, &(0x7f0000000840)=ANY=[@ANYBLOB="00fc00403b70c0fec2106d263dde2f404280f8b366f8a3a2090000003a12587636140ce9a472f4bf91af", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x20000000}}, {{&(0x7f0000004c80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004d40)=[{&(0x7f0000004d00)="2283a3b7ca398246018db5ab4d9d8db05463141da930bb13", 0x18}], 0x1, &(0x7f0000004dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x20, 0x20000000}}, {{&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000005180)=[{&(0x7f0000004e80)="6d720d73aea7809c9abf0c404114d3a376daa46755e145a159eeb6a2cdd9c8aecb8f2fcc627895bd04312d95b883560ed62f70ba9f2a27", 0x37}, {&(0x7f0000004ec0)="6c28ca863e7fd2", 0x7}, {&(0x7f0000004f00)="9b2e16e9b7eb5b66d57967d9cc6a9d35", 0x10}, {&(0x7f0000004f40)="a0d3f6602d0d07108d64a6c991e2b959429b8d86bb5aa8f908847ba8f58678369496375bcc4a72dcb77b4b0263ec7ccb61ae1d71bf019628fa2173b9d605c8697c22424661dc8654a11561c1e1a9d855ce460b63febd949eeb712bdc42f85d7f6b5a5e19d8b8f99ff59133a21f176494359434cdfc3c7186bea71f29f574c8a57e32d0a77b6e9d2d311d5c1f1169003543d3364269daffcd166b58527cc42434b29b5ffb3904527e9f22b70b2c0dc3228d5c3bb2049397433779703a5d53721cf63eedf1f6aed6aacad0c6538a60480770057e74550a7aa6818359cfea265c13ddd793e242f179f4d026dcd7f9", 0xed}, {&(0x7f0000005040)="432769b1c2c09bc2c25f0cbbb17aa84b52ee03eebe6808c8916a6b8e36c8924dcaa7b65d828d049f3bc524a1c95d6d06bb657bf0ab608e2f4d194746e34556963b780f266fbdca8c731b70d320a4538cff5dc5457787825719abdbb96a323183203e27b304408efaa70bbfd1c7dea797d47ac3a4c7fb734eba3e65505cec6f2d41be670c8515a0cbba5e87e17489ccde9ea7d97f12ea7841e00a0fc630a964e34dd1eca13642fc8a71458bdc0eaf9c9d253b6d4f65ec7eb6974fed9f540a79d0824f29104f9d186f28cfdecaf75b3fa2a3", 0xd1}, {&(0x7f0000005140)="e767e9c756772b38440056ad3d6ff0348741204c5643368bd67c4f465f756428879da95054c1ff113d", 0x29}], 0x6, &(0x7f0000002b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c00000000000000010000000200000066b19d0506bfc629149e2d34082e9550d48f422162417c2980fef8792b8ab8a9a7057b0c3622b1c7ea5d144cbf7f05c2c9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32], 0x98, 0x11}}, {{&(0x7f0000005440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000055c0)=[{&(0x7f00000054c0)="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", 0xff}], 0x1, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1cd1dd00003b4ed45305e96ee723d598195bee06033bbc87c85a653b0ee8", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x110}}, {{&(0x7f0000007180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000077c0)=[{&(0x7f0000007200)="35371a2ae5ad9c1f2b1c162803eff3ae2402fdb9378b3bd2c3b5f875a520297cae96ff361673d18e062fd4508406d7e3", 0x30}, {&(0x7f0000007240)="fd335f11213e77ea5694770b9c4c2c95ee3c8cfab7369d6d0a5b39e259d51d287cb85c4a57459f4af365004330d3d14444a357e4da0cd678b9f80a7fe6ad726eaf5bd077cb8915e1", 0x48}, {&(0x7f00000072c0)="b890af39cd877fd0a4bf0e21ebdeb540ecf10a31a35b7d25bb81a724d2d3fad622d54f64592c332f98f23474286bbae63e7f6e95287d0ce3fabb41adb745943a543c284dfc7f1ef981cb5e7352e23c79e134b8686a2b1afe3bb3790768e82cdbe6c224bee3c78f626d25f348bbac651b1448bd8f31cb280488025f4ccd7cba", 0x7f}, {&(0x7f0000007340)="dff49aecfdbf4705585e9539c2672ab9aac524c4bb04ec42d131b43abdaac49e539448aa219748196e5d79d1e59b940a8ebfc4f82ba2b51ad19446102dd3dda107a3984ebc360a7423a8886c80fd3a3de205fdc1cf539d499185dacd54ad2b7c85e9ffa4d7222c11c6f38d7123f72f3070169515fbe63c0600e5efb822f24d2dfbde9e4c25a41be6640b7222f0b185cc7e830aba55abc1cb", 0x98}, {&(0x7f0000007400)="09f0be7d7c48774cff996d3225d3e4e06299eb941be6c9efa775184dd265ea48db7aefff68f4bb908e3be9529363bdcf0fb20b808f76096261c4ea868924f30a95f4f170d66dccfbc45f7cf7daeb2decb5fc80f03e20b5c882cf134bb4c4594fbe26a8b63e304d8009e7bf1ae1ca27edf99f5a08968576670dcba3d2e5dfd819769c99c28321058832f4625e9303ed21025887fda0ba7514c14bb27dec1fa7c852c4dd36", 0xa4}, {&(0x7f00000074c0)="e717c9ec341c646966c447565cf7f7c9d341f27070a6ab108b3570792e6f75fc30e36e6c73c865a8aeddbc485b507f83a2363012f4efc6bf6932914d74ddc7704dab88cc744236d43673befad5825f43dcd2ab37c6595e4f610699fc4dd1f8137247474f62f868b86dff43d217529a70f4055ce4c577c41ed84563dd1b68ec2b0d92ff5af25aa9dea440e5fad5acda636aeb5eb3b5dca84544c38f6b9c30c84390e13268aa94ab10d1bfd5e0e27b07102778ea1afe9ffebd00e78b1e", 0xbc}, {&(0x7f0000007580)="7ae2fbb268057f28ecc50aa4642724d459cb8dece17b5c8f826d8133f39731e481f686074c6e305932bb55ef7dce7aec8b31a3303015d79b6cd64edd3e49215e9e3ca323b8d87134db532d6dd925f43d2487101b52ee936831e621ba73ef3ceb91b6d1003a75c80540494d9d9b32d8359ac1ebe75aaf45fa1ae36b8781e6afe5c82dc4cd782c624c40914ece2657029c8b68784e3ee646d77ce563469c9bdd25f89298", 0xa3}, {&(0x7f0000007640)="e901e7bce204d33930d7f6d5419be498f47e4285c2ac6f4f9d3b9915cb2788f58c6b5290fc3d920e8c7f814009783b61f23f9897c7333228d08b79af9090799a19e71b67347514371ab3d3fee58cf434f5f64f1ac17d525c2af25410c0e61c3fd283df209ad2203a3c0993225814ff3a6b6a70c83ff9a4cc1cdf64e706763f75df195e921f8db4830e3a46e3ba718dd6932363c7af4760533b47e750901f280a01058822d2cecd7d6ad727", 0xab}, {&(0x7f0000007700)="6e6c9cca84997ad523185641be2d6fd03634b9bb562a857cc30974b2539f8174d32055a11fb7e6e65f1e54debdcdb54d45eeb3321c1c3bf38522a124f98a78764b644b0a1492562c04d44abf84a23164825a4ab03e412cbaa39392a6f9398509785d56f98d1d2c5c3243af2d08d943ae0eadfe9d2c20420a08c0cf21ded045dd1c77bc4bd4842149b26fd5fccc2dc9d5ed7e97c7760b55c109b58814674b5bc756d3f86949210130c2e6302e261a4535efec9cae644e", 0xb6}], 0x9, &(0x7f0000007880)=[@cred={{0x1c, 0x1, 0x2, {r0, r7, 0xffffffffffffffff}}}], 0x20, 0x800}}], 0x5, 0x20040004) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) syz_clone3(&(0x7f0000001b00)={0x20000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0xe}, &(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/67, &(0x7f0000001ac0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) 23:57:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400f00024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:21 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x402000, 0x183) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, r5, 0x1, 0x91, 0x6, @broadcast}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r6, 0xffffffffffffffff, 0x0) 23:57:21 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x8933, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 814.088851][T30335] binder: 30333:30335 ioctl c0306201 20001480 returned -14 [ 814.118027][T30339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x401c5820, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:21 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000324001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:21 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x402000, 0x183) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, r5, 0x1, 0x91, 0x6, @broadcast}, 0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r6, 0xffffffffffffffff, 0x0) [ 814.527585][T30346] binder: BINDER_SET_CONTEXT_MGR already set [ 814.527597][T30346] binder: 30345:30346 ioctl 40046207 0 returned -16 23:57:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400448c9, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 814.527878][T30346] binder: 30345:30346 ioctl c0306201 20001480 returned -14 [ 814.533942][T30346] binder: 30345:30346 ioctl 8933 200007c0 returned -22 23:57:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x40086602, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000524001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfff, 0x4a}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x4895) close_range(r0, 0xffffffffffffffff, 0x0) [ 815.330747][T30358] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 815.356083][T30362] binder: BINDER_SET_CONTEXT_MGR already set 23:57:22 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x402000, 0x183) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf5, r5, 0x1, 0x91, 0x6, @broadcast}, 0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r6, 0xffffffffffffffff, 0x0) 23:57:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400448dd, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 815.356095][T30362] binder: 30361:30362 ioctl 40046207 0 returned -16 [ 815.382237][T30362] binder: 30361:30362 ioctl c0306201 20001480 returned -14 23:57:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000624001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 815.384402][T30362] binder: 30361:30362 ioctl 400448c9 200007c0 returned -22 [ 815.555158][T30380] binder: 30378:30380 ioctl c0306201 20001480 returned -14 [ 815.574666][T30380] binder: 30378:30380 ioctl 400448dd 200007c0 returned -22 23:57:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:22 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400454ca, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x10000080) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = accept(r5, &(0x7f0000000540)=@generic, &(0x7f0000000400)=0x80) sendmsg$sock(r8, &(0x7f0000000300)={&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="9357a81bf2b6e09620d8494debf2de9787a4e2c6309d064537711122e84a8ff44194dedaa40df8aab7a264e7a948e5f09a7acc50170f01f0220d5703bfd23d0fad9585dced146cdc13df002a91c76a0e6bd4e0b9c121e8f11f8a37c5adbe", 0x5e}], 0x1, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x30}}], 0x18}, 0x10) sendfile(r6, r5, &(0x7f0000000340)=0x9, 0x7ff) 23:57:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:22 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000724001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 815.720014][T30389] binder: BINDER_SET_CONTEXT_MGR already set [ 815.720026][T30389] binder: 30388:30389 ioctl 40046207 0 returned -16 [ 815.720316][T30389] binder: 30388:30389 ioctl c0306201 20001480 returned -14 [ 815.729008][T30389] binder: 30388:30389 ioctl 400454ca 200007c0 returned -22 [ 815.778179][T30393] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:23 executing program 2: mknod(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000140)='./file1\x00', 0x8001420, 0xeb6) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xdf, 0xa) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 23:57:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400680724001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @void, @void}}}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x10000080) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = accept(r5, &(0x7f0000000540)=@generic, &(0x7f0000000400)=0x80) sendmsg$sock(r8, &(0x7f0000000300)={&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="9357a81bf2b6e09620d8494debf2de9787a4e2c6309d064537711122e84a8ff44194dedaa40df8aab7a264e7a948e5f09a7acc50170f01f0220d5703bfd23d0fad9585dced146cdc13df002a91c76a0e6bd4e0b9c121e8f11f8a37c5adbe", 0x5e}], 0x1, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x30}}], 0x18}, 0x10) (async) sendfile(r6, r5, &(0x7f0000000340)=0x9, 0x7ff) 23:57:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:23 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000924001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) [ 816.578113][T30404] binder: 30402:30404 ioctl c0306201 20001480 returned -14 23:57:23 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:23 executing program 2: mknod(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) (async) mknod(&(0x7f0000000140)='./file1\x00', 0x8001420, 0xeb6) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) shutdown(0xffffffffffffffff, 0x0) (async) splice(r0, 0x0, r1, 0x0, 0xdf, 0xa) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 23:57:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$inet(r4, &(0x7f00000003c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x10000080) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = accept(r5, &(0x7f0000000540)=@generic, &(0x7f0000000400)=0x80) sendmsg$sock(r8, &(0x7f0000000300)={&(0x7f0000000140)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="9357a81bf2b6e09620d8494debf2de9787a4e2c6309d064537711122e84a8ff44194dedaa40df8aab7a264e7a948e5f09a7acc50170f01f0220d5703bfd23d0fad9585dced146cdc13df002a91c76a0e6bd4e0b9c121e8f11f8a37c5adbe", 0x5e}], 0x1, &(0x7f00000002c0)=[@timestamping={{0x14, 0x1, 0x25, 0x30}}], 0x18}, 0x10) sendfile(r6, r5, &(0x7f0000000340)=0x9, 0x7ff) 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000a24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:24 executing program 2: mknod(&(0x7f00000000c0)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000140)='./file1\x00', 0x8001420, 0xeb6) (async) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) splice(r0, 0x0, r1, 0x0, 0xdf, 0xa) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 23:57:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 816.791401][T30428] binder: 30422:30428 ioctl c0306201 20001480 returned -14 [ 816.793607][T30428] binder: BINDER_SET_CONTEXT_MGR already set [ 816.793616][T30428] binder: 30422:30428 ioctl 40046207 200007c0 returned -16 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r0 = syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="299a9a0cf14db2578befa33be7ead1f0f10e4347f863ffa46aa0f45b1b958381ff368089e773049c0402b01af83fcf4ffa0f97dd0cd355a908aa545b8797a82ce9c1b1f5edb6732029ff9393b71722dda1a503800c6bcf025aa6a7ac248c681a04f8cde567e3c9b595793cbb4ecdc063415417e3505361020329805fc34dca27bd301d17a9946628b1a37117ffae236f8196885a0193ffcf767a5a4025c07c4445529393e2b60e417be7937d3cc8b748df888951f582f1e16e29c837abd15a8b40b13e748148c91a98452012170ed3d831211e36b7219c11cac5c1432d89900bda7ae8ef19d757c3facce9ded88a4b", 0xef, 0x6b8e}, {&(0x7f00000001c0)="efdd03ce8a82658df28070b7cba68d8e2ee5762a038d5a73535cd62222e964b61f464c57d9a0b28712e78c95e355dd3cf244d7214b3389c636a792acd0be949045978e", 0x43, 0x7}], 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB="2d2c2c2f6465762f736e642f736571002c2f6465762f736e642f7365710001000061636b6673726f6f743d2f6465762f736e642f736571002c00"]) close_range(r0, r0, 0x0) [ 816.993316][T30442] binder: 30441:30442 ioctl c0306201 20001480 returned -14 23:57:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:24 executing program 2: r0 = syz_clone(0x40000000, &(0x7f0000000000)="a14245d8eb2cb28d1fccb6b2c79f02039b53c026de37efce652af01ec74920083a3a18", 0x23, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="e93854acff4a5032dea5af6155931d28b376a9b3c5ea4a337ee2ed99bcf3d98f78f7fddab88e51ac017235a69b305e9953c14ea29758f01eaea74227475b9a52d4dc8294940096e445ad237247252fda0540ca308666fc5fec84665aabb83aa6211e5f934b8b4cb9ffc4f33fb96a3c8b46823eefc23bf83be8ffee26e4dfeb2eff399e4ae10c27c4f27d919749e2d06144a097049d1f216b4cc6d6f65cfc771f7498865c8571a76fa52423") tkill(r0, 0x3e) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001340), 0x40800, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x3, 0x39, 0xfb, &(0x7f0000001240)=""/251}) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r1) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000240)={{0x0, 0x0, 0x800, 0xfffffffffffff6f6, 0x20, 0x2e45, 0x9, 0x80a, 0x3, 0x401, 0x9, 0x2, 0x4, 0x8001, 0x3}}) 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000b24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 817.078907][T30445] loop0: detected capacity change from 0 to 107 [ 817.088591][T30445] romfs: Unknown parameter '-' 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 817.137990][T30452] binder: 30447:30452 ioctl c0306201 20001480 returned -14 23:57:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r0 = syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="299a9a0cf14db2578befa33be7ead1f0f10e4347f863ffa46aa0f45b1b958381ff368089e773049c0402b01af83fcf4ffa0f97dd0cd355a908aa545b8797a82ce9c1b1f5edb6732029ff9393b71722dda1a503800c6bcf025aa6a7ac248c681a04f8cde567e3c9b595793cbb4ecdc063415417e3505361020329805fc34dca27bd301d17a9946628b1a37117ffae236f8196885a0193ffcf767a5a4025c07c4445529393e2b60e417be7937d3cc8b748df888951f582f1e16e29c837abd15a8b40b13e748148c91a98452012170ed3d831211e36b7219c11cac5c1432d89900bda7ae8ef19d757c3facce9ded88a4b", 0xef, 0x6b8e}, {&(0x7f00000001c0)="efdd03ce8a82658df28070b7cba68d8e2ee5762a038d5a73535cd62222e964b61f464c57d9a0b28712e78c95e355dd3cf244d7214b3389c636a792acd0be949045978e", 0x43, 0x7}], 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB="2d2c2c2f6465762f736e642f736571002c2f6465762f736e642f7365710001000061636b6673726f6f743d2f6465762f736e642f736571002c00"]) close_range(r0, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="299a9a0cf14db2578befa33be7ead1f0f10e4347f863ffa46aa0f45b1b958381ff368089e773049c0402b01af83fcf4ffa0f97dd0cd355a908aa545b8797a82ce9c1b1f5edb6732029ff9393b71722dda1a503800c6bcf025aa6a7ac248c681a04f8cde567e3c9b595793cbb4ecdc063415417e3505361020329805fc34dca27bd301d17a9946628b1a37117ffae236f8196885a0193ffcf767a5a4025c07c4445529393e2b60e417be7937d3cc8b748df888951f582f1e16e29c837abd15a8b40b13e748148c91a98452012170ed3d831211e36b7219c11cac5c1432d89900bda7ae8ef19d757c3facce9ded88a4b", 0xef, 0x6b8e}, {&(0x7f00000001c0)="efdd03ce8a82658df28070b7cba68d8e2ee5762a038d5a73535cd62222e964b61f464c57d9a0b28712e78c95e355dd3cf244d7214b3389c636a792acd0be949045978e", 0x43, 0x7}], 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB="2d2c2c2f6465762f736e642f736571002c2f6465762f736e642f7365710001000061636b6673726f6f743d2f6465762f736e642f736571002c00"]) (async) close_range(r0, r0, 0x0) (async) 23:57:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000c24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 817.264988][T30456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000e24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 817.387963][T30465] binder: BINDER_SET_CONTEXT_MGR already set [ 817.387976][T30465] binder: 30464:30465 ioctl 40046207 0 returned -16 [ 817.388270][T30465] binder: 30464:30465 ioctl c0306201 20001480 returned -14 23:57:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 817.390411][T30469] loop0: detected capacity change from 0 to 107 [ 817.391546][T30469] romfs: Unknown parameter '-' 23:57:24 executing program 2: r0 = syz_clone(0x40000000, &(0x7f0000000000)="a14245d8eb2cb28d1fccb6b2c79f02039b53c026de37efce652af01ec74920083a3a18", 0x23, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="e93854acff4a5032dea5af6155931d28b376a9b3c5ea4a337ee2ed99bcf3d98f78f7fddab88e51ac017235a69b305e9953c14ea29758f01eaea74227475b9a52d4dc8294940096e445ad237247252fda0540ca308666fc5fec84665aabb83aa6211e5f934b8b4cb9ffc4f33fb96a3c8b46823eefc23bf83be8ffee26e4dfeb2eff399e4ae10c27c4f27d919749e2d06144a097049d1f216b4cc6d6f65cfc771f7498865c8571a76fa52423") tkill(r0, 0x3e) (async) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001340), 0x40800, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x3, 0x39, 0xfb, &(0x7f0000001240)=""/251}) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r1) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000240)={{0x0, 0x0, 0x800, 0xfffffffffffff6f6, 0x20, 0x2e45, 0x9, 0x80a, 0x3, 0x401, 0x9, 0x2, 0x4, 0x8001, 0x3}}) 23:57:24 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:24 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r0 = syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="299a9a0cf14db2578befa33be7ead1f0f10e4347f863ffa46aa0f45b1b958381ff368089e773049c0402b01af83fcf4ffa0f97dd0cd355a908aa545b8797a82ce9c1b1f5edb6732029ff9393b71722dda1a503800c6bcf025aa6a7ac248c681a04f8cde567e3c9b595793cbb4ecdc063415417e3505361020329805fc34dca27bd301d17a9946628b1a37117ffae236f8196885a0193ffcf767a5a4025c07c4445529393e2b60e417be7937d3cc8b748df888951f582f1e16e29c837abd15a8b40b13e748148c91a98452012170ed3d831211e36b7219c11cac5c1432d89900bda7ae8ef19d757c3facce9ded88a4b", 0xef, 0x6b8e}, {&(0x7f00000001c0)="efdd03ce8a82658df28070b7cba68d8e2ee5762a038d5a73535cd62222e964b61f464c57d9a0b28712e78c95e355dd3cf244d7214b3389c636a792acd0be949045978e", 0x43, 0x7}], 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB="2d2c2c2f6465762f736e642f736571002c2f6465762f736e642f7365710001000061636b6673726f6f743d2f6465762f736e642f736571002c00"]) close_range(r0, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4, 0x2, &(0x7f0000000240)=[{&(0x7f00000000c0)="299a9a0cf14db2578befa33be7ead1f0f10e4347f863ffa46aa0f45b1b958381ff368089e773049c0402b01af83fcf4ffa0f97dd0cd355a908aa545b8797a82ce9c1b1f5edb6732029ff9393b71722dda1a503800c6bcf025aa6a7ac248c681a04f8cde567e3c9b595793cbb4ecdc063415417e3505361020329805fc34dca27bd301d17a9946628b1a37117ffae236f8196885a0193ffcf767a5a4025c07c4445529393e2b60e417be7937d3cc8b748df888951f582f1e16e29c837abd15a8b40b13e748148c91a98452012170ed3d831211e36b7219c11cac5c1432d89900bda7ae8ef19d757c3facce9ded88a4b", 0xef, 0x6b8e}, {&(0x7f00000001c0)="efdd03ce8a82658df28070b7cba68d8e2ee5762a038d5a73535cd62222e964b61f464c57d9a0b28712e78c95e355dd3cf244d7214b3389c636a792acd0be949045978e", 0x43, 0x7}], 0x8800, &(0x7f0000000280)=ANY=[@ANYBLOB="2d2c2c2f6465762f736e642f736571002c2f6465762f736e642f7365710001000061636b6673726f6f743d2f6465762f736e642f736571002c00"]) (async) close_range(r0, r0, 0x0) (async) 23:57:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:24 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000f24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400001124001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 817.712064][T30489] loop0: detected capacity change from 0 to 107 [ 817.715513][T30489] romfs: Unknown parameter '-' [ 817.730119][T30487] binder: 30485:30487 ioctl c0306201 20001480 returned -14 23:57:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x0, 0x8}, 0x80, 0x0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 817.730961][T30487] binder: 30485:30487 ioctl 40086602 200007c0 returned -22 [ 817.782703][T30494] loop0: detected capacity change from 0 to 107 [ 817.783014][T30494] romfs: Unknown parameter '-' 23:57:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400655824001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) signalfd(r0, &(0x7f0000000140)={[0x9b]}, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 817.929740][T30506] binder: 30504:30506 ioctl c0306201 20001480 returned -14 [ 817.930658][T30506] binder: 30504:30506 ioctl 400c620e 200007c0 returned -22 23:57:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:25 executing program 2: r0 = syz_clone(0x40000000, &(0x7f0000000000)="a14245d8eb2cb28d1fccb6b2c79f02039b53c026de37efce652af01ec74920083a3a18", 0x23, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="e93854acff4a5032dea5af6155931d28b376a9b3c5ea4a337ee2ed99bcf3d98f78f7fddab88e51ac017235a69b305e9953c14ea29758f01eaea74227475b9a52d4dc8294940096e445ad237247252fda0540ca308666fc5fec84665aabb83aa6211e5f934b8b4cb9ffc4f33fb96a3c8b46823eefc23bf83be8ffee26e4dfeb2eff399e4ae10c27c4f27d919749e2d06144a097049d1f216b4cc6d6f65cfc771f7498865c8571a76fa52423") tkill(r0, 0x3e) (async) sched_getaffinity(r0, 0x8, &(0x7f0000000180)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async, rerun: 64) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001340), 0x40800, 0x0) (rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000001c0)={0x3, 0x39, 0xfb, &(0x7f0000001240)=""/251}) (async, rerun: 64) syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r1) (async, rerun: 64) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000240)={{0x0, 0x0, 0x800, 0xfffffffffffff6f6, 0x20, 0x2e45, 0x9, 0x80a, 0x3, 0x401, 0x9, 0x2, 0x4, 0x8001, 0x3}}) 23:57:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x0, 0x8}, 0x80, 0x0}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$packet(0x11, 0x3, 0x300) (async) sendmmsg$sock(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x0, 0x8}, 0x80, 0x0}}], 0x1, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400006024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 818.198412][T30524] binder: 30518:30524 ioctl c0306201 20001480 returned -14 [ 818.199145][T30524] binder: BINDER_SET_CONTEXT_MGR already set 23:57:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40186366, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (rerun: 32) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async, rerun: 32) r1 = socket$packet(0x11, 0x3, 0x300) sendmmsg$sock(r1, &(0x7f0000000200)=[{{&(0x7f0000000040)=@isdn={0x22, 0x8, 0x0, 0x8}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 23:57:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400586524001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 818.199161][T30524] binder: 30518:30524 ioctl 4018620d 200007c0 returned -16 23:57:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 818.391769][T30541] binder: 30538:30541 ioctl c0306201 20001480 returned -14 [ 818.394857][T30541] binder: 30538:30541 ioctl 40186366 200007c0 returned -22 23:57:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400076824001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:25 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x401c5820, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:25 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400008124001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x3, 0x15, 0x0, 'queue0\x00', 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:26 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000522000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x2927e000) r1 = syz_clone(0x2800a00, 0x0, 0x52, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000005c0)={0x2000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x12}, &(0x7f0000000440)=""/249, 0xf9, &(0x7f0000000540)=""/20, &(0x7f0000000580)=[0x0, r2], 0x2}, 0x58) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) r3 = syz_clone(0x10800000, &(0x7f0000000000)="0148f15537d15585a10c8026eec90c9d110f36584fc1b9cc5fa9f66c6c20cc53b4b3731497856a4c76674ec350d99910a26f6ab04ad53f8de3fa36ade2dbf552c469d01d23250d3eaab7fa771bb46da55075f02253067b0dbe8c22bfc7fe29dc738e9448c209ff2799e37489ae3805e32c0732a5c2926e7893df3f6106", 0x7d, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="7dc70d6dfbe67c74f80b17859798f2bf1496b96e519785115d8ddfedb6e02d4a3968d4ab6dcbdd83581d9fcf3dfde080404dbe3843c7b3e96baabf54b44bab915afa7ec8ca520bfff6d81246b5d1a41763af1feb777d776d0c275746d1e6fdef6860aa0910de7d0315706b732aed8e012591bfdc4de2e7") setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.parent_freezing\x00', 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000340)={&(0x7f0000000240)="f603c37c3a0ddebaacf34d92e236c46f56bb9a7740b91e73b2091125fd7651b999f3612d3e9dd4067a7c622e26d6a6c2e462f5e3dd89c117d8c1899cbaee40b6d2670552bb7db2db8a91168fcf8b1f3cca617bb1f59341f23c9dadda5ac57657071eeaff1478e3f55c8c0d2104a7fd89f7f5f46cfa50af986681de63d4a8da0f9e5ef00be66fd7382541fe3e36402aac9c45f50b09f0c1ef5dc9ac1397446a34b7b8700660b77fef27a04c4d7e35adac49e2bd4dacbfaa5249ce90f576a040f965151ff726559d80ba8e8bff848fee7a335f087a5046526d7f", 0xd9}) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 23:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 818.673799][T30553] binder: 30551:30553 ioctl c0306201 20001480 returned -14 [ 818.674537][T30553] binder: 30551:30553 ioctl 401c5820 200007c0 returned -22 23:57:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000f024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000003001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40800) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x3, 0x15, 0x0, 'queue0\x00', 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 818.879014][T30573] binder: 30572:30573 ioctl c0306201 20001480 returned -14 23:57:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x80086301, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086301, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:26 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000522000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x2927e000) (async) r1 = syz_clone(0x2800a00, 0x0, 0x52, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) (async) syz_clone3(&(0x7f00000005c0)={0x2000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x12}, &(0x7f0000000440)=""/249, 0xf9, &(0x7f0000000540)=""/20, &(0x7f0000000580)=[0x0, r2], 0x2}, 0x58) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) r3 = syz_clone(0x10800000, &(0x7f0000000000)="0148f15537d15585a10c8026eec90c9d110f36584fc1b9cc5fa9f66c6c20cc53b4b3731497856a4c76674ec350d99910a26f6ab04ad53f8de3fa36ade2dbf552c469d01d23250d3eaab7fa771bb46da55075f02253067b0dbe8c22bfc7fe29dc738e9448c209ff2799e37489ae3805e32c0732a5c2926e7893df3f6106", 0x7d, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="7dc70d6dfbe67c74f80b17859798f2bf1496b96e519785115d8ddfedb6e02d4a3968d4ab6dcbdd83581d9fcf3dfde080404dbe3843c7b3e96baabf54b44bab915afa7ec8ca520bfff6d81246b5d1a41763af1feb777d776d0c275746d1e6fdef6860aa0910de7d0315706b732aed8e012591bfdc4de2e7") (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.parent_freezing\x00', 0x0, 0x0) (async) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000340)={&(0x7f0000000240)="f603c37c3a0ddebaacf34d92e236c46f56bb9a7740b91e73b2091125fd7651b999f3612d3e9dd4067a7c622e26d6a6c2e462f5e3dd89c117d8c1899cbaee40b6d2670552bb7db2db8a91168fcf8b1f3cca617bb1f59341f23c9dadda5ac57657071eeaff1478e3f55c8c0d2104a7fd89f7f5f46cfa50af986681de63d4a8da0f9e5ef00be66fd7382541fe3e36402aac9c45f50b09f0c1ef5dc9ac1397446a34b7b8700660b77fef27a04c4d7e35adac49e2bd4dacbfaa5249ce90f576a040f965151ff726559d80ba8e8bff848fee7a335f087a5046526d7f", 0xd9}) (async) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 23:57:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000f001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 819.149170][T30587] binder: 30582:30587 ioctl c0306201 20001480 returned -14 [ 819.150020][T30587] binder: 30582:30587 ioctl 80086301 200007c0 returned -22 23:57:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x3, 0x15, 0x0, 'queue0\x00', 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40800) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000080)={0x3, 0x15, 0x0, 'queue0\x00', 0x3}) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000224001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x80086601, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 819.362891][T30607] binder: 30602:30607 ioctl c0306201 20001480 returned -14 [ 819.387313][T30607] binder: 30602:30607 ioctl 80086601 200007c0 returned -22 23:57:26 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000522000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x2927e000) r1 = syz_clone(0x2800a00, 0x0, 0x52, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000005c0)={0x2000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x12}, &(0x7f0000000440)=""/249, 0xf9, &(0x7f0000000540)=""/20, &(0x7f0000000580)=[0x0, r2], 0x2}, 0x58) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) r3 = syz_clone(0x10800000, &(0x7f0000000000)="0148f15537d15585a10c8026eec90c9d110f36584fc1b9cc5fa9f66c6c20cc53b4b3731497856a4c76674ec350d99910a26f6ab04ad53f8de3fa36ade2dbf552c469d01d23250d3eaab7fa771bb46da55075f02253067b0dbe8c22bfc7fe29dc738e9448c209ff2799e37489ae3805e32c0732a5c2926e7893df3f6106", 0x7d, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="7dc70d6dfbe67c74f80b17859798f2bf1496b96e519785115d8ddfedb6e02d4a3968d4ab6dcbdd83581d9fcf3dfde080404dbe3843c7b3e96baabf54b44bab915afa7ec8ca520bfff6d81246b5d1a41763af1feb777d776d0c275746d1e6fdef6860aa0910de7d0315706b732aed8e012591bfdc4de2e7") setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.parent_freezing\x00', 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000340)={&(0x7f0000000240)="f603c37c3a0ddebaacf34d92e236c46f56bb9a7740b91e73b2091125fd7651b999f3612d3e9dd4067a7c622e26d6a6c2e462f5e3dd89c117d8c1899cbaee40b6d2670552bb7db2db8a91168fcf8b1f3cca617bb1f59341f23c9dadda5ac57657071eeaff1478e3f55c8c0d2104a7fd89f7f5f46cfa50af986681de63d4a8da0f9e5ef00be66fd7382541fe3e36402aac9c45f50b09f0c1ef5dc9ac1397446a34b7b8700660b77fef27a04c4d7e35adac49e2bd4dacbfaa5249ce90f576a040f965151ff726559d80ba8e8bff848fee7a335f087a5046526d7f", 0xd9}) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) mmap(&(0x7f0000522000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x2927e000) (async) syz_clone(0x2800a00, 0x0, 0x52, 0x0, 0x0, 0x0) (async) ptrace(0x10, r1) (async) getpid() (async) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) (async) syz_clone3(&(0x7f00000005c0)={0x2000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x12}, &(0x7f0000000440)=""/249, 0xf9, &(0x7f0000000540)=""/20, &(0x7f0000000580)=[0x0, r2], 0x2}, 0x58) (async) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) (async) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) (async) syz_clone(0x10800000, &(0x7f0000000000)="0148f15537d15585a10c8026eec90c9d110f36584fc1b9cc5fa9f66c6c20cc53b4b3731497856a4c76674ec350d99910a26f6ab04ad53f8de3fa36ade2dbf552c469d01d23250d3eaab7fa771bb46da55075f02253067b0dbe8c22bfc7fe29dc738e9448c209ff2799e37489ae3805e32c0732a5c2926e7893df3f6106", 0x7d, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="7dc70d6dfbe67c74f80b17859798f2bf1496b96e519785115d8ddfedb6e02d4a3968d4ab6dcbdd83581d9fcf3dfde080404dbe3843c7b3e96baabf54b44bab915afa7ec8ca520bfff6d81246b5d1a41763af1feb777d776d0c275746d1e6fdef6860aa0910de7d0315706b732aed8e012591bfdc4de2e7") (async) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.parent_freezing\x00', 0x0, 0x0) (async) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000340)={&(0x7f0000000240)="f603c37c3a0ddebaacf34d92e236c46f56bb9a7740b91e73b2091125fd7651b999f3612d3e9dd4067a7c622e26d6a6c2e462f5e3dd89c117d8c1899cbaee40b6d2670552bb7db2db8a91168fcf8b1f3cca617bb1f59341f23c9dadda5ac57657071eeaff1478e3f55c8c0d2104a7fd89f7f5f46cfa50af986681de63d4a8da0f9e5ef00be66fd7382541fe3e36402aac9c45f50b09f0c1ef5dc9ac1397446a34b7b8700660b77fef27a04c4d7e35adac49e2bd4dacbfaa5249ce90f576a040f965151ff726559d80ba8e8bff848fee7a335f087a5046526d7f", 0xd9}) (async) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) (async) 23:57:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:26 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000324001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:26 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x801c581f, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 819.565542][T30624] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 819.606606][T30626] binder: 30621:30626 ioctl c0306201 20001480 returned -14 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000424001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 819.607255][T30626] binder: 30621:30626 ioctl 801c581f 200007c0 returned -22 23:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 819.793305][T30644] binder: 30637:30644 ioctl c0306201 20001480 returned -14 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000524001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x801c581f, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) [ 819.884201][T30651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 23:57:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000624001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 819.995422][T30659] binder: 30658:30659 ioctl c0306201 20001480 returned -14 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x6}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x33f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x84) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000724001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc00c620f, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 820.150781][T30682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 820.161376][T30678] binder: 30677:30678 ioctl c0306201 20001480 returned -14 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000824001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 820.217876][T30679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc00c6211, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 820.277048][T30691] binder: 30688:30691 ioctl c0306201 20001480 returned -14 [ 820.277814][T30691] binder: 30688:30691 ioctl c00c620f 200007c0 returned -22 23:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2082) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000522000/0x3000)=nil, 0x3000, 0x2000000, 0x110, r0, 0x2927e000) r1 = syz_clone(0x2800a00, 0x0, 0x52, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x3) syz_clone3(&(0x7f00000005c0)={0x2000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x12}, &(0x7f0000000440)=""/249, 0xf9, &(0x7f0000000540)=""/20, &(0x7f0000000580)=[0x0, r2], 0x2}, 0x58) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/75) r3 = syz_clone(0x10800000, &(0x7f0000000000)="0148f15537d15585a10c8026eec90c9d110f36584fc1b9cc5fa9f66c6c20cc53b4b3731497856a4c76674ec350d99910a26f6ab04ad53f8de3fa36ade2dbf552c469d01d23250d3eaab7fa771bb46da55075f02253067b0dbe8c22bfc7fe29dc738e9448c209ff2799e37489ae3805e32c0732a5c2926e7893df3f6106", 0x7d, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)="7dc70d6dfbe67c74f80b17859798f2bf1496b96e519785115d8ddfedb6e02d4a3968d4ab6dcbdd83581d9fcf3dfde080404dbe3843c7b3e96baabf54b44bab915afa7ec8ca520bfff6d81246b5d1a41763af1feb777d776d0c275746d1e6fdef6860aa0910de7d0315706b732aed8e012591bfdc4de2e7") setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.parent_freezing\x00', 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x201, &(0x7f0000000340)={&(0x7f0000000240)="f603c37c3a0ddebaacf34d92e236c46f56bb9a7740b91e73b2091125fd7651b999f3612d3e9dd4067a7c622e26d6a6c2e462f5e3dd89c117d8c1899cbaee40b6d2670552bb7db2db8a91168fcf8b1f3cca617bb1f59341f23c9dadda5ac57657071eeaff1478e3f55c8c0d2104a7fd89f7f5f46cfa50af986681de63d4a8da0f9e5ef00be66fd7382541fe3e36402aac9c45f50b09f0c1ef5dc9ac1397446a34b7b8700660b77fef27a04c4d7e35adac49e2bd4dacbfaa5249ce90f576a040f965151ff726559d80ba8e8bff848fee7a335f087a5046526d7f", 0xd9}) mbind(&(0x7f0000196000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000924001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 820.408892][T30711] binder: 30709:30711 ioctl c0306201 20001480 returned -14 [ 820.409917][T30711] BUG: sleeping function called from invalid context at lib/usercopy.c:28 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2082) (async) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000a24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 820.409934][T30711] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 30711, name: syz-executor.4 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 820.409954][T30711] preempt_count: 1, expected: 0 23:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xa2082) close_range(r0, 0xffffffffffffffff, 0x0) [ 820.409964][T30711] RCU nest depth: 0, expected: 0 23:57:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000b24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 820.409976][T30711] 1 lock held by syz-executor.4/30711: [ 820.409990][T30711] #0: ffff88807eb5a2f8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80 23:57:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0400) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:27 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 820.410076][T30711] Preemption disabled at: [ 820.410081][T30711] [<0000000000000000>] 0x0 [ 820.410101][T30711] CPU: 0 PID: 30711 Comm: syz-executor.4 Not tainted 5.18.0-rc7-next-20220520-syzkaller #0 [ 820.410128][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.410142][T30711] Call Trace: [ 820.410148][T30711] [ 820.410157][T30711] dump_stack_lvl+0xcd/0x134 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000c24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 820.410188][T30711] __might_resched.cold+0x222/0x26b [ 820.410272][T30711] __might_fault+0x6c/0x170 [ 820.410307][T30711] _copy_to_user+0x25/0x140 [ 820.410338][T30711] binder_ioctl+0x7aa/0x6d80 [ 820.410382][T30711] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 820.410418][T30711] ? tomoyo_path_number_perm+0x24e/0x590 [ 820.410468][T30711] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 820.410507][T30711] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 820.410559][T30711] ? binder_thread_write+0x3220/0x3220 23:57:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0400) (async) close_range(r0, 0xffffffffffffffff, 0x0) [ 820.410594][T30711] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 820.410626][T30711] ? do_vfs_ioctl+0x132/0x15c0 [ 820.410662][T30711] ? vfs_fileattr_set+0xbe0/0xbe0 [ 820.410726][T30711] ? __context_tracking_exit+0xb8/0xe0 [ 820.410776][T30711] ? __fget_files+0x286/0x470 [ 820.410820][T30711] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 820.410858][T30711] ? binder_thread_write+0x3220/0x3220 [ 820.410897][T30711] __x64_sys_ioctl+0x193/0x200 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000e24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 820.410934][T30711] do_syscall_64+0x35/0xb0 [ 820.410964][T30711] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 820.410990][T30711] RIP: 0033:0x7f58ab2890e9 [ 820.411009][T30711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 820.411033][T30711] RSP: 002b:00007f58ac392168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.411057][T30711] RAX: ffffffffffffffda RBX: 00007f58ab39bf60 RCX: 00007f58ab2890e9 [ 820.411074][T30711] RDX: 00000000200007c0 RSI: 00000000c00c6211 RDI: 0000000000000004 [ 820.411090][T30711] RBP: 00007f58ab2e308d R08: 0000000000000000 R09: 0000000000000000 [ 820.411105][T30711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.411121][T30711] R13: 00007fffc662632f R14: 00007f58ac392300 R15: 0000000000022000 [ 820.411163][T30711] [ 820.411232][T30711] [ 820.411236][T30711] ============================= [ 820.411242][T30711] [ BUG: Invalid wait context ] [ 820.411250][T30711] 5.18.0-rc7-next-20220520-syzkaller #0 Tainted: G W [ 820.411266][T30711] ----------------------------- 23:57:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0400) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0400) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 820.411271][T30711] syz-executor.4/30711 is trying to lock: [ 820.411283][T30711] ffff88807c945c28 (&mm->mmap_lock#2){++++}-{3:3}, at: __might_fault+0xa1/0x170 [ 820.411351][T30711] other info that might help us debug this: [ 820.411358][T30711] context-{4:4} [ 820.411368][T30711] 1 lock held by syz-executor.4/30711: [ 820.411382][T30711] #0: ffff88807eb5a2f8 (&proc->inner_lock){+.+.}-{2:2}, at: binder_ioctl+0x798/0x6d80 [ 820.411453][T30711] stack backtrace: [ 820.411459][T30711] CPU: 0 PID: 30711 Comm: syz-executor.4 Tainted: G W 5.18.0-rc7-next-20220520-syzkaller #0 [ 820.411487][T30711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 820.411502][T30711] Call Trace: [ 820.411508][T30711] [ 820.411516][T30711] dump_stack_lvl+0xcd/0x134 [ 820.411544][T30711] __lock_acquire.cold+0xdb/0x3b4 [ 820.411585][T30711] ? lock_chain_count+0x20/0x20 [ 820.411623][T30711] ? lockdep_hardirqs_on_prepare+0x400/0x400 23:57:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306202, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000f24001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40b0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400001024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 820.411672][T30711] lock_acquire+0x1ab/0x570 [ 820.411708][T30711] ? __might_fault+0xa1/0x170 [ 820.411738][T30711] ? lock_release+0x780/0x780 [ 820.411775][T30711] ? dump_stack_lvl+0x120/0x134 [ 820.411803][T30711] ? dump_stack_lvl+0x12a/0x134 [ 820.411837][T30711] ? dump_stack_lvl+0x12c/0x134 [ 820.411868][T30711] __might_fault+0x104/0x170 [ 820.411897][T30711] ? __might_fault+0xa1/0x170 [ 820.411927][T30711] _copy_to_user+0x25/0x140 [ 820.411949][T30711] binder_ioctl+0x7aa/0x6d80 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306203, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40b0}, 0x0) (async, rerun: 32) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 32) [ 820.411987][T30711] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 820.412021][T30711] ? tomoyo_path_number_perm+0x24e/0x590 23:57:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400001124001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306205, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 820.412060][T30711] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 820.412097][T30711] ? lockdep_hardirqs_on_prepare+0x400/0x400 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400006024001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 820.412141][T30711] ? binder_thread_write+0x3220/0x3220 [ 820.412175][T30711] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 23:57:28 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306215, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 820.412208][T30711] ? do_vfs_ioctl+0x132/0x15c0 23:57:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40b0}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:28 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000007b001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 820.412241][T30711] ? vfs_fileattr_set+0xbe0/0xbe0 [ 820.412282][T30711] ? __context_tracking_exit+0xb8/0xe0 [ 820.412324][T30711] ? __fget_files+0x286/0x470 [ 820.412360][T30711] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 820.412393][T30711] ? binder_thread_write+0x3220/0x3220 [ 820.412437][T30711] __x64_sys_ioctl+0x193/0x200 [ 820.412477][T30711] do_syscall_64+0x35/0xb0 [ 820.412507][T30711] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 820.412535][T30711] RIP: 0033:0x7f58ab2890e9 [ 820.412553][T30711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 820.412577][T30711] RSP: 002b:00007f58ac392168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.412600][T30711] RAX: ffffffffffffffda RBX: 00007f58ab39bf60 RCX: 00007f58ab2890e9 [ 820.412623][T30711] RDX: 00000000200007c0 RSI: 00000000c00c6211 RDI: 0000000000000004 [ 820.412638][T30711] RBP: 00007f58ab2e308d R08: 0000000000000000 R09: 0000000000000000 [ 820.412654][T30711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.412670][T30711] R13: 00007fffc662632f R14: 00007f58ac392300 R15: 0000000000022000 [ 820.412696][T30711] [ 820.532889][T30721] binder: 30720:30721 ioctl c0306201 20001480 returned -14 [ 820.639413][T30731] binder: 30730:30731 ioctl c0306201 20001480 returned -14 [ 820.640001][T30731] binder: 30730:30731 ioctl c018620c 200007c0 returned -22 [ 820.740639][T30745] binder: 30744:30745 ioctl c0306201 20001480 returned -14 [ 820.890073][T30757] binder: 30755:30757 ioctl c0306201 20001480 returned -14 23:57:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x5d, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x250000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x6, 0xff}, 0x0, 0x4, 0x4, {0x6, 0x80}, 0x6, 0xca9}) 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000c0001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) [ 821.212176][T30781] binder: 30775:30781 ioctl c0306201 20001480 returned -14 [ 821.212650][T30781] binder: 30775:30781 ioctl c0306202 200007c0 returned -22 [ 821.287732][T30793] binder: 30784:30793 ioctl c0306201 20001480 returned -14 [ 821.291749][T30793] binder: 30784:30793 ioctl c0306203 200007c0 returned -22 [ 821.387130][T30801] binder: 30799:30801 ioctl c0306201 20001480 returned -14 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000ec0001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x250000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x6, 0xff}, 0x0, 0x4, 0x4, {0x6, 0x80}, 0x6, 0xca9}) [ 821.387615][T30801] binder: 30799:30801 ioctl c0306205 200007c0 returned -22 [ 821.440968][T30810] binder: 30809:30810 ioctl c0306201 20001480 returned -14 23:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x2, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000003001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 821.441438][T30810] binder: 30809:30810 ioctl c0306215 200007c0 returned -22 [ 821.784184][T30828] binder: 30821:30828 ioctl c0306201 20001480 returned -14 [ 821.883056][T30845] binder: 30841:30845 ioctl c0306201 20001480 returned -14 [ 821.883524][T30845] binder: 30841:30845 unknown command 81984 [ 821.883540][T30845] binder: 30841:30845 ioctl c0306201 200007c0 returned -22 23:57:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x250000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x6, 0xff}, 0x0, 0x4, 0x4, {0x6, 0x80}, 0x6, 0xca9}) 23:57:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x3, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000000f001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x4, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000007b001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x400, 0x100) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0x4, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0xfffffffb, 0xa2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) [ 822.011744][T30859] binder: 30851:30859 ioctl c0306201 20001480 returned -14 [ 822.012275][T30859] binder: 30851:30859 unknown command 320 23:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x400, 0x100) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0x4, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0xfffffffb, 0xa2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40040) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) [ 822.012292][T30859] binder: 30851:30859 ioctl c0306201 200007c0 returned -22 [ 822.083083][T30866] binder: 30864:30866 ioctl c0306201 20001480 returned -14 [ 822.083595][T30866] binder: 30864:30866 unknown command 1 [ 822.083611][T30866] binder: 30864:30866 ioctl c0306201 200007c0 returned -22 23:57:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) (async) r2 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.pending_reads\x00', 0x400, 0x100) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0x4, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3, 0x7e}}}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0xfffffffb, 0xa2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40040) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000c0001d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x5, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:29 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x6, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000c00e1d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:29 executing program 0: write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x480002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3b8, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x316d8, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x4042, 0x4, 0x1, 0x8, 0x1, 0x2, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x4, 0x7, 0xfff, 0x100, 0x0, 0x3ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x7}, {0x5, 0x8}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x2}, {0x6, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x39e, 0xc0f5, 0x8000, 0x5, 0x4, 0x20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x1d}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xff, 0x2, 0x76c6, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecfc, 0xf6, 0x6, 0x6, 0x1af1, 0x1, 0x1, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x2, 0x3, 0x7, 0xc4, 0x9, 0x51]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0xffff, 0x9, 0x2, 0xe098, 0x400, 0xf50a]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x1}, {0x2, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x1b, 0x1b, 0x36, 0x1, 0x36, 0x24, 0x4, 0x9, 0x18, 0xc, 0x36, 0x1, 0x60, 0x16, 0xb, 0x4, 0x6c, 0x4, 0x18, 0xc, 0x1b, 0xb, 0xc, 0x16, 0x24, 0x6, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x4, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x2, 0x4, 0x2, 0x48, 0xd0d290e6bbb889da, 0x12, 0x60, 0x18, 0x18, 0x6c, 0x36, 0x1b, 0x12, 0x36, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x9, 0x3, 0x0, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x0, 0x7a, 0x24, 0x24, 0x60, 0x1b, 0x6c, 0x4, 0x6c, 0x2, 0x3, 0x2, 0x3, 0x3, 0x60, 0x2, 0x60, 0x6c, 0x18, 0x18, 0x22, 0x0, 0x6c, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x18, 0x60, 0x6, 0x12, 0x9, 0x2, 0x48, 0x35, 0x9, 0x18, 0x6, 0x1, 0x18, 0x2, 0xc, 0x12, 0x60, 0x36, 0x12, 0x0, 0x1, 0x24, 0x24, 0x36, 0x0, 0xc, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x1e}, {0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x6}]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4804}, 0x4) [ 822.345768][T30882] binder: 30880:30882 ioctl c0306201 20001480 returned -14 [ 822.346240][T30882] binder: 30880:30882 unknown command 0 23:57:29 executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 822.346259][T30882] binder: 30880:30882 ioctl c0306201 200007c0 returned -22 [ 822.428554][T30895] binder: 30890:30895 ioctl c0306201 20001480 returned -14 [ 822.433808][T30895] binder: 30890:30895 unknown command 0 [ 822.433826][T30895] binder: 30890:30895 ioctl c0306201 200007c0 returned -22 23:57:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x7, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024021d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:30 executing program 0: write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x480002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3b8, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x316d8, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x4042, 0x4, 0x1, 0x8, 0x1, 0x2, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x4, 0x7, 0xfff, 0x100, 0x0, 0x3ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x7}, {0x5, 0x8}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x2}, {0x6, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x39e, 0xc0f5, 0x8000, 0x5, 0x4, 0x20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x1d}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xff, 0x2, 0x76c6, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecfc, 0xf6, 0x6, 0x6, 0x1af1, 0x1, 0x1, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x2, 0x3, 0x7, 0xc4, 0x9, 0x51]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0xffff, 0x9, 0x2, 0xe098, 0x400, 0xf50a]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x1}, {0x2, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x1b, 0x1b, 0x36, 0x1, 0x36, 0x24, 0x4, 0x9, 0x18, 0xc, 0x36, 0x1, 0x60, 0x16, 0xb, 0x4, 0x6c, 0x4, 0x18, 0xc, 0x1b, 0xb, 0xc, 0x16, 0x24, 0x6, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x4, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x2, 0x4, 0x2, 0x48, 0xd0d290e6bbb889da, 0x12, 0x60, 0x18, 0x18, 0x6c, 0x36, 0x1b, 0x12, 0x36, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x9, 0x3, 0x0, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x0, 0x7a, 0x24, 0x24, 0x60, 0x1b, 0x6c, 0x4, 0x6c, 0x2, 0x3, 0x2, 0x3, 0x3, 0x60, 0x2, 0x60, 0x6c, 0x18, 0x18, 0x22, 0x0, 0x6c, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x18, 0x60, 0x6, 0x12, 0x9, 0x2, 0x48, 0x35, 0x9, 0x18, 0x6, 0x1, 0x18, 0x2, 0xc, 0x12, 0x60, 0x36, 0x12, 0x0, 0x1, 0x24, 0x24, 0x36, 0x0, 0xc, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x1e}, {0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x6}]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4804}, 0x4) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x480002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3b8, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x316d8, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x4042, 0x4, 0x1, 0x8, 0x1, 0x2, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x4, 0x7, 0xfff, 0x100, 0x0, 0x3ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x7}, {0x5, 0x8}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x2}, {0x6, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x39e, 0xc0f5, 0x8000, 0x5, 0x4, 0x20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x1d}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xff, 0x2, 0x76c6, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecfc, 0xf6, 0x6, 0x6, 0x1af1, 0x1, 0x1, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x2, 0x3, 0x7, 0xc4, 0x9, 0x51]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0xffff, 0x9, 0x2, 0xe098, 0x400, 0xf50a]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x1}, {0x2, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x1b, 0x1b, 0x36, 0x1, 0x36, 0x24, 0x4, 0x9, 0x18, 0xc, 0x36, 0x1, 0x60, 0x16, 0xb, 0x4, 0x6c, 0x4, 0x18, 0xc, 0x1b, 0xb, 0xc, 0x16, 0x24, 0x6, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x4, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x2, 0x4, 0x2, 0x48, 0xd0d290e6bbb889da, 0x12, 0x60, 0x18, 0x18, 0x6c, 0x36, 0x1b, 0x12, 0x36, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x9, 0x3, 0x0, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x0, 0x7a, 0x24, 0x24, 0x60, 0x1b, 0x6c, 0x4, 0x6c, 0x2, 0x3, 0x2, 0x3, 0x3, 0x60, 0x2, 0x60, 0x6c, 0x18, 0x18, 0x22, 0x0, 0x6c, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x18, 0x60, 0x6, 0x12, 0x9, 0x2, 0x48, 0x35, 0x9, 0x18, 0x6, 0x1, 0x18, 0x2, 0xc, 0x12, 0x60, 0x36, 0x12, 0x0, 0x1, 0x24, 0x24, 0x36, 0x0, 0xc, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x1e}, {0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x6}]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4804}, 0x4) (async) 23:57:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x12, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:30 executing program 0: write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x480002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3b8, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x316d8, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x4042, 0x4, 0x1, 0x8, 0x1, 0x2, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x4, 0x7, 0xfff, 0x100, 0x0, 0x3ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x7}, {0x5, 0x8}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x2}, {0x6, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x39e, 0xc0f5, 0x8000, 0x5, 0x4, 0x20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x1d}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xff, 0x2, 0x76c6, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecfc, 0xf6, 0x6, 0x6, 0x1af1, 0x1, 0x1, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x2, 0x3, 0x7, 0xc4, 0x9, 0x51]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0xffff, 0x9, 0x2, 0xe098, 0x400, 0xf50a]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x1}, {0x2, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x1b, 0x1b, 0x36, 0x1, 0x36, 0x24, 0x4, 0x9, 0x18, 0xc, 0x36, 0x1, 0x60, 0x16, 0xb, 0x4, 0x6c, 0x4, 0x18, 0xc, 0x1b, 0xb, 0xc, 0x16, 0x24, 0x6, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x4, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x2, 0x4, 0x2, 0x48, 0xd0d290e6bbb889da, 0x12, 0x60, 0x18, 0x18, 0x6c, 0x36, 0x1b, 0x12, 0x36, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x9, 0x3, 0x0, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x0, 0x7a, 0x24, 0x24, 0x60, 0x1b, 0x6c, 0x4, 0x6c, 0x2, 0x3, 0x2, 0x3, 0x3, 0x60, 0x2, 0x60, 0x6c, 0x18, 0x18, 0x22, 0x0, 0x6c, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x18, 0x60, 0x6, 0x12, 0x9, 0x2, 0x48, 0x35, 0x9, 0x18, 0x6, 0x1, 0x18, 0x2, 0xc, 0x12, 0x60, 0x36, 0x12, 0x0, 0x1, 0x24, 0x24, 0x36, 0x0, 0xc, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x1e}, {0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x6}]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4804}, 0x4) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x480002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r4}, @void}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000100)={0x3b8, r3, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x316d8, 0x6}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3f, 0x4042, 0x4, 0x1, 0x8, 0x1, 0x2, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x3, 0x4, 0x7, 0xfff, 0x100, 0x0, 0x3ff]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x0, 0x9}, {0x5, 0xa}, {0x6, 0x9}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x2}, {0x4, 0x2}, {0x3, 0x2}, {0x3, 0x4}, {0x7, 0x2}, {0x5, 0x9}, {0x4, 0x6}, {0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x0, 0x9}, {}, {0x0, 0x6}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x3}, {0x7, 0x4}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x6}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x5, 0x9}, {0x6, 0x5}, {0x7, 0x7}, {0x7}, {0x5, 0x8}, {0x7, 0x7}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x1}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x6, 0x5}, {0x2}, {0x6, 0x6}, {0x1}, {0x7, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x6}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0x7}, {0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x1}, {0x6, 0x1}, {0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x3, 0xa}, {0x2, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x6}, {0x4, 0xa}, {0x4, 0xa}, {0x3, 0x5}, {0x6, 0x4}]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x8, 0x39e, 0xc0f5, 0x8000, 0x5, 0x4, 0x20]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x2}, {0x5, 0x7}, {0x1, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0xa}, {0x4, 0x1d}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x4}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x1}, {0x5, 0x1}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x6, 0x6}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x5}, {0x2, 0x1}, {0x7, 0x4}, {0x1, 0x3}, {0x6, 0x6}, {0x5, 0x8}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x3, 0xff, 0x2, 0x76c6, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x3}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0xa}, {0x4, 0xa}, {0x5, 0x4}, {0x7, 0x4}, {0x4, 0x9}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x3}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x5}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x5, 0x4}, {0x7, 0x8}, {0x6, 0x2}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0x9}, {0x4}, {0x6, 0x2}, {0x5, 0xa}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x4}, {0x0, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x1, 0xa}, {0x2}, {0x1, 0x2}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x2, 0x6}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x1}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecfc, 0xf6, 0x6, 0x6, 0x1af1, 0x1, 0x1, 0x100]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x2, 0x3, 0x7, 0xc4, 0x9, 0x51]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x2, 0xffff, 0x9, 0x2, 0xe098, 0x400, 0xf50a]}}]}, @NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x6}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0xa}, {0x1}, {0x2, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x3, 0x4}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x1b, 0x1b, 0x36, 0x1, 0x36, 0x24, 0x4, 0x9, 0x18, 0xc, 0x36, 0x1, 0x60, 0x16, 0xb, 0x4, 0x6c, 0x4, 0x18, 0xc, 0x1b, 0xb, 0xc, 0x16, 0x24, 0x6, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x3, 0x2}, {0x4}, {0x7, 0x9}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x5}, {0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x6}, {0x3, 0x4}, {0x2, 0x7}, {0x6}, {0x4, 0x5}, {0x1}, {0x2, 0x7}, {0x6, 0x3}, {0x0, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x2, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x2, 0x9}, {0x4, 0x8}, {0x2, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x0, 0x3}, {0x0, 0x2}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x1}, {0x4, 0x2}, {0x5, 0x4}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x2, 0x4, 0x2, 0x48, 0xd0d290e6bbb889da, 0x12, 0x60, 0x18, 0x18, 0x6c, 0x36, 0x1b, 0x12, 0x36, 0x24, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x9, 0x3, 0x0, 0x3, 0x3, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x6, 0x0, 0x7a, 0x24, 0x24, 0x60, 0x1b, 0x6c, 0x4, 0x6c, 0x2, 0x3, 0x2, 0x3, 0x3, 0x60, 0x2, 0x60, 0x6c, 0x18, 0x18, 0x22, 0x0, 0x6c, 0xb, 0x24]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x3, 0x18, 0x60, 0x6, 0x12, 0x9, 0x2, 0x48, 0x35, 0x9, 0x18, 0x6, 0x1, 0x18, 0x2, 0xc, 0x12, 0x60, 0x36, 0x12, 0x0, 0x1, 0x24, 0x24, 0x36, 0x0, 0xc, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x5, 0x6}, {0x0, 0xa}, {0x0, 0x9}, {0x6, 0x1}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x8}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x1e}, {0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x5, 0x3}, {0x7, 0x6}, {0x2, 0x7}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x6}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x6}, {0x4}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x6}, {0x3, 0x8}, {0x5, 0x5}, {0x7, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x1}, {0x3, 0x3}, {0x6, 0x2}, {0x2, 0x1}, {0x6, 0x4}, {}, {0x2, 0x4}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x0, 0x6}]}]}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x4804}, 0x4) (async) 23:57:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024031d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 822.977141][T30913] binder: 30908:30913 ioctl c0306201 20001480 returned -14 23:57:30 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 822.981163][T30913] binder: 30908:30913 unknown command 0 23:57:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a4c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024041d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 822.981181][T30913] binder: 30908:30913 ioctl c0306201 200007c0 returned -22 [ 823.083223][T30944] binder: 30943:30944 ioctl c0306201 20001480 returned -14 [ 823.083526][T30944] binder: 30943:30944 unknown command 0 [ 823.083536][T30944] binder: 30943:30944 ioctl c0306201 200007c0 returned -22 23:57:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x48, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a4c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a4c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024051d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a4c81) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2a4c81) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 23:57:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x58, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:30 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024061d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 823.318969][T30959] binder: 30954:30959 ioctl c0306201 20001480 returned -14 23:57:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 823.422811][T30978] binder: 30968:30978 ioctl c0306201 20001480 returned -14 23:57:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x3) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:31 executing program 0: socketpair(0xb, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000201010400050000000000000c0000024400108008000340000001010800034000000009080001400000000908000340000000030800014000000007080001400000080008000240000100000800014000000101140018800800014000000005080003400001000106001240000400004400198008000100ea02000008000100220100000800010004020000080002002c09000008000200a00000000800020020000000080001003b0d0000080002000f000000"], 0xb8}, 0x1, 0x0, 0x0, 0x48190}, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e21, 0x80000001, @mcast2, 0x6}, {&(0x7f0000000240)=""/153, 0x99}, &(0x7f0000000300), 0x1}, 0xa0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r1, 0xffffffffffffffff, 0x0) 23:57:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x70, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024071d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r2, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8}, @void}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024081d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:31 executing program 0: socketpair(0xb, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000201010400050000000000000c0000024400108008000340000001010800034000000009080001400000000908000340000000030800014000000007080001400000080008000240000100000800014000000101140018800800014000000005080003400001000106001240000400004400198008000100ea02000008000100220100000800010004020000080002002c09000008000200a00000000800020020000000080001003b0d0000080002000f000000"], 0xb8}, 0x1, 0x0, 0x0, 0x48190}, 0x1) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e21, 0x80000001, @mcast2, 0x6}, {&(0x7f0000000240)=""/153, 0x99}, &(0x7f0000000300), 0x1}, 0xa0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) (async, rerun: 64) close_range(r1, 0xffffffffffffffff, 0x0) (rerun: 64) 23:57:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x300, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) [ 823.937655][T30993] binder: 30984:30993 ioctl c0306201 20001480 returned -14 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000024091d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 824.063064][T31013] binder: 31009:31013 ioctl c0306201 20001480 returned -14 23:57:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@dstype3], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 23:57:31 executing program 0: socketpair(0xb, 0x4, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="b80000000201010400050000000000000c0000024400108008000340000001010800034000000009080001400000000908000340000000030800014000000007080001400000080008000240000100000800014000000101140018800800014000000005080003400001000106001240000400004400198008000100ea02000008000100220100000800010004020000080002002c09000008000200a00000000800020020000000080001003b0d0000080002000f000000"], 0xb8}, 0x1, 0x0, 0x0, 0x48190}, 0x1) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000340)={@in6={0xa, 0x4e21, 0x80000001, @mcast2, 0x6}, {&(0x7f0000000240)=""/153, 0x99}, &(0x7f0000000300), 0x1}, 0xa0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r1, 0xffffffffffffffff, 0x0) 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000240a1d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x500, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000004a0002002cbd7000ffdbdf250a004000", @ANYRES32=r7, @ANYBLOB="c522d51b52aa80f0316fc87e25673acf2f2ce111da3a63f00a89f747b1a3"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x20044000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x4c, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x80}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1f}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1f}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x0, 0x7, 0x1f, 0x20, 0x55, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x80, 0x4, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x2f, 0x4, 0x5, 0x4e1e, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x10, 0x3f, 0x2e}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000007c0)={0xa8, r2, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r9}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xe0c81) close_range(r0, 0xffffffffffffffff, 0x0) 23:57:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x31bf41299e476c6f, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x80001ffe}, @val={0x8, 0x3, r2}, @void}}}, 0x24}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000240b1d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) [ 824.300061][T31022] binder: 31017:31022 ioctl c0306201 20001480 returned -14 23:57:31 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306205, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:31 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x600, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)=ANY=[@ANYBLOB="852a68730000000001"], &(0x7f0000000240)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x3, 0x40, 0x7, 0x3a, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0xf5, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000240c1d0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000f1ffffff00000000090001006866736300000000140002"], 0x44}}, 0x0) 23:57:31 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00', 0x4019}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1, 0x0, 0x600, 'none\x00'}, 0x2c) ioctl$sock_ipv6_tunnel_