executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1596.718818][T17508] binder: 17506:17508 ioctl c0306201 20000540 returned -14 21:46:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x2}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x6000) [ 1596.945887][T17517] binder: 17516:17517 ioctl c0306201 20000540 returned -14 21:46:14 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='ip6erspan0\x00', 0x7fffffff, 0x7, 0xd51}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000100)=0x6) 21:46:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x3}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:14 executing program 0: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) 21:46:14 executing program 0: socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1597.282625][T17534] binder: 17529:17534 ioctl c0306201 20000540 returned -14 21:46:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r2, &(0x7f0000000040)=@profile={'permprofile ', '@:{\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000001c0)={0xffffffff, 0x80, 0x1}) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_aout(r3, &(0x7f0000000240)={{0xcc, 0x86, 0x9, 0x1c4, 0xea, 0x3, 0x3e0, 0x8000}, "64fea0c0da238055aa62eaf4f320ec89c736cbfc095dfbe3e45fb679b40f21f60cb48f4dac9e2f45d3448fa879d0068696f554cea453db4e82926fe65a5609537037427e24d8dea21c81ac36629c189ba7a6dd880b998d887fa584a3fc7941c1a16dd4f76ec620eb9bce5139", [[], [], [], [], [], [], [], []]}, 0x88c) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x1, 0x6}, {0x97e, 0x1f}]}, 0x14, 0x1) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:15 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:46:15 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x80000001, 0xd6, 0x8001, 0x4, 0x1}, 0x14) [ 1597.565010][T17547] binder: 17542:17547 ioctl c0306201 20000540 returned -14 21:46:15 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/184) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r3, 0x402c5639, &(0x7f0000000100)={0x3d8, 0x3, 0x5ee}) 21:46:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x5}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:15 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01040400", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) sendmmsg$inet(r0, &(0x7f00000014c0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="ba47bc3d6f9721efef682ba259f61d374aeeefd29730a26400d3fe61244bb120b47903c808414bb2d778f9770233c84f988fe655b5dd47e53aca938ff57e30539fc074fc94499193efa43dc663bed60b8d18bd4eba441d8ddf988fcd2cdaeb8ebc9a7953d08877c4fc471e1b260baace956820c25d02aa71db9f3b8ca7d4b99736623390b4aeff3c5409a521909dec5705d137306845ea1afe47ff3295308cbc4d9ed808ebc27d3135aba0", 0xab}], 0x1, &(0x7f0000001540)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @generic={0x94, 0x3, '3'}, @timestamp={0x44, 0x14, 0x50, 0x0, 0x9, [0x762, 0x3, 0x1, 0xfff]}]}}}], 0x58}}, {{&(0x7f0000000200)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000001440)=[{&(0x7f0000000240)="24421f8ed0258fa393eb4dfcd402afe67ee425c43d652d3df1de829702f2e93f88db73dd307b4cbde933167a65405c1877599e83d8d273a108dd528e4733fa63dd476dc9c67b9776af137f2f3f2ea9deaae37d4e299c1e96f81800b73aa49e", 0x5f}, {&(0x7f00000002c0)="a898793ec4d9fa168764192dd6107f0d6735569224a57f1f5588152619ac35b25fbf8f841303fcab4aaeb277863485847a8171b724d89839d6f5570f775ad8243e7e9734e7bcb705fdaea0fc30791949fbf70c4c1a115e4d4a355a3a", 0x5c}, {&(0x7f0000000340)="4142dc8c6ce88e06def1770934e1f8f1b8fc27f4", 0x14}, {&(0x7f0000000380)="03202efb1c6920b07990a29b1201167e103f5e8c65528950c510b93edf4dd06c62724411fecddbb3599fefa547400cc7c6a37d5096b6ebd80e21a30cee14bdd906ff7c6981f6ea9bfff31d8e79fd90de801dc7a3bc9d677fc23a84fcf3838302764b6604f2b1712f1b6baa4dddb7a0c85983cbc595066d84ecf377ba6f6ff0bd40068a719a739e704459cca23e600c1b0bc9822f55bfc464025185ec4bfd86af2d6696272af43a6803ee6ec806b537fb", 0xb0}, {&(0x7f0000000440)="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", 0x1000}], 0x5}}], 0x2, 0x44880) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) [ 1597.858733][T17570] binder: 17565:17570 ioctl c0306201 20000540 returned -14 21:46:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xf000) 21:46:15 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="a0409b213e63e2588913f97327189201000000de0b6c88832920729562dc3b9acb5fc37484d7d74f71a3e32589157e92215b8391145dd6efb077", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000b59f8a7d4948ba602b7dbd84f745ed255329ffbc3236612f01f6083d4bbac65b0114ee17bd22335ea44c308901e2346ce0cb19387cac2555ac2f195337b8757e0985ca9cc073b5e0a159c3649f8da6e68f5cc816fcfd12ef81a7496856d44dcbcaf6e87cad9fdb7624fcff037ae61dd5cfefbe71b2958571c4d11c10d3164b0daaca9a012e0dfc79525c6d4267e67b3c260922265b39e92683032b3a752b99e10f21b2c3cec3d7354aa2eccea84884be38c6daf80eaa555ada5b8b0a6e702ec672bffd6aa492ce2748eff0fa", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @multicast2}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RXATTRCREATE(r7, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x50200, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r5, 0xe1, "121f7e49d8f3b7ba1ef5bff9e2e4cde0efe1f6c60db1ed74c5b7d38e5b5b15f72ed8e269fb245c3bfa421828f2b3ce7ccc8d302a1adc6887afb56c060d76b54d92494d907568be5e95093bb1d56451a54d6bc3070a6f67d9a903f1b93b7dbe8c12f5d8aa95d6e4e25ee2b7af3f28785aa8181bede944bcb4459da886c9a578edd4dde62b22b947f5e8f5232d575e90db432155d717ac4aa3a0fee9cfffce91e9827da8512ef80318a384596beddf81223b0edfda1a609122669de23c698715f7bb93b0e6d7eec00294eeb8a7e6dcebb3a1ea1fd4275d7738a19f7e17173f6f3cd3"}, &(0x7f0000000000)=0xe9) prctl$PR_SVE_SET_VL(0x32, 0x3b012) 21:46:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1598.241078][T17583] binder: 17581:17583 ioctl c0306201 20000540 returned -14 21:46:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1598.430196][T17588] binder: 17587:17588 ioctl c0306201 20000540 returned -14 21:46:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x8}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1598.608255][T17591] binder: 17590:17591 ioctl c0306201 20000540 returned -14 21:46:16 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)={0x8000, 0xe413, 0xfffa, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x24}, 0x76f3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="9902d4ea86b410ebd02704ee8f5af1e1daccb7935901b58c66e888dbd191455f8d3b8e71a5bec8d08a301d5d29e721426e07ee9c0fdd80979a418198d53b0609b36d7668503b618b413677662ea11eec4c18b1d4c37f22b9412fa0f9b665e4c1f628fbd839e3e011ef42940c3a1a44", 0x6f}], 0x1, &(0x7f00000001c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x30}}, {{&(0x7f0000000240)={0xa, 0x4e21, 0xc4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000280)="ecdc0e32a326f8a56d503c77dac516e00f67e469c4ff8f944bae0db92f4c9a399cc32283f4aa4e3608234827da8d5424331ce5f33953", 0x36}, {&(0x7f00000002c0)="93657936d7e792694b99a3d88f44d5bda8421e84c76e9f4d5a477fd97752baa223c7826c1605934b41306bfc5896d31dde5ae20c8bf3d41feec9bdd152ca774ca96a7c5f96101d59922f3bf8c09f6c5261db55784da4817d8fb29c343a5011ccccd5cf4cf7cf0f5c568e67f749941918380d159bc8231d937da2d3b568b6db85b37cb5d4af60403b2027348fe9f90f6c501f79fee6cd37d17bc36930d4fecb16772b0141e1e0b5443291e238ef682c54096688746e402f443f1e5505e07df854a5cdba858b63522f05df73d262e71b274e96bf4b57227d6d7592f98a493eae905aabdef40d7d944e3c6a470fc981d132d0363e6a36e719324fe8ae", 0xfb}, {&(0x7f00000003c0)="d3d0500f97209893dc460905a66da390578aca253af7a1c74876fbc7f7deaef270294d268fbdb2e7e97194a85296efefeb6e28d8c80f83362ea1d1ec5657752045e954c8ef145e4117f41f1130", 0x4d}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="cb7a45e64aa5ea8eaf10b7ae24f5807d7710eb3e1c02ef2f0c4063c6d41f16085cb69d1ca540f45b3a94bd188b6e43446832fb69472a384bad5d1c6b10a6f002dcef17434d9c71a2538bbaae02ec9a4d6fb50e013a811f8276af98c8b2ddb4e9374d448075ccf0a850c9d39fb57b9ee3cc3e910d414de9f83517d2972e583607e3652e5cf881d93504a6d50a08e94f70f3160d9e948eecc979a7ece8235fa7a4322748e3e3ec9c61f6717c260e85a8ed1bd09a4e00788aff6e8928029eb860be838d781aa6da53317e8050f93db3d302220ca2144c7a1c8851c656809fa4b8e1d6fc87cf", 0xe4}, {&(0x7f0000001540)="d90e0054871c8bb29971f7365c5a5fbee27e85851447d4842fc64ce41904599559e9d756609a2cc5dab7b009084116207a657c0ad4418bece6cdb7f32f8235e7caf02a926b8227239fbbe68d46ac5f491aeaa5f40df97d12f2", 0x59}], 0x6, &(0x7f0000001640)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x32, 0x0, [], [@ra={0x5, 0x2, 0x3}]}}}, @hopopts={{0x80, 0x29, 0x36, {0x0, 0xc, [], [@ra={0x5, 0x2, 0x1}, @generic={0x3f, 0x33, "1965495ba4f62910576870628ba88ff09dff53acba32915d940ac54720b5bbc2d42846defde485bca193a3df2c861e4665fbbb"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x1f, 0x1ff, [0xffffffff, 0x128000000000000, 0x6, 0xffffffff]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8001}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x100}}, {{&(0x7f0000001740)={0xa, 0x4e20, 0xd6, @remote}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001780)="a424578c693d5294e71630b7929afda6df8e870d88e0863593864d171414818b3c09c8bbd63f2a5d3029b85da33545ae8bdb3785600363a55265324ea7495508fd0b8ebbe345753e11503b5adb5b7bfc0d0271aa94adb1e6c9c76870eca57436fc8a", 0x62}], 0x1, &(0x7f0000001840)=[@hopopts={{0xc0, 0x29, 0x36, {0x2c, 0x14, [], [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2}, @generic={0x9, 0x4d, "35307303b154678a07397c51b85a9446b6975dcb9d2065a77b0c439815ec2efaa4be4210f57ed127d37b1849bbedfbc80a3e044632b841cc48519508354beefe401adb58875baa20cfd2abbced"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x14}}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}], 0xd8}}, {{&(0x7f0000001940)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c, &(0x7f0000001ac0)=[{&(0x7f0000001980)="8f4cd83cd4310052e0", 0x9}, {&(0x7f00000019c0)="dffd11368a7f3e96520adb8f2fbb5cde6d87490bd07ddd30334cc4ffb781bfcb132cfedbe0a3075e333b2ed6778bd961", 0x30}, {&(0x7f0000001a00)="106a6201f1abc2329137b6dabaef81f630a9f5856af88db55405aacdcc56740271f358054dbfd0d4e7d394fd78bc6c86668671a32df13f51e54dcf6a173df3dce6d20d2f5d1c0d9fe8daf215e177b6421572a1f81e3516ce4982dbc83f5e82f35bbf1107d47cce288aad1f83994f40b3ab8c563c73763a44641b8214bfef5c4b8fc485192e4fb3174f8e3e30de14", 0x8e}], 0x3, &(0x7f0000001b00)=[@hopopts={{0x60, 0x29, 0x36, {0x1, 0x8, [], [@hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x7fffffff}, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x20, {0x3, 0x6, 0x20, 0x7, [0x9c8, 0x401, 0x60c]}}]}}}], 0x60}}], 0x4, 0x40054) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 21:46:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x48}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1598.869621][T17607] binder: 17605:17607 ioctl c0306201 20000540 returned -14 21:46:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4c}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:16 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x980000, 0x8000, 0x5, r2, 0x0, &(0x7f0000000040)={0x990a71, 0x7, [], @value=0xb247}}) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r3, 0x111, 0x4, 0x1, 0x4) [ 1599.078895][T17614] binder: 17611:17614 ioctl c0306201 20000540 returned -14 21:46:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xf0ffff) 21:46:16 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01140000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r3, 0x4}, &(0x7f0000000080)=0x8) 21:46:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x60}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x68}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1599.323942][T17625] binder: 17623:17625 ioctl c0306201 20000540 returned -14 [ 1599.479859][T17634] binder: 17632:17634 ioctl c0306201 20000540 returned -14 21:46:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6c}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x1000000) [ 1599.705286][T17643] binder: 17641:17643 ioctl c0306201 20000540 returned -14 21:46:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x74}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x2000000) [ 1599.961293][T17650] binder: 17649:17650 ioctl c0306201 20000540 returned -14 21:46:17 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r7, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x10006095}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000000c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x4c, r3, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vxcan1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x42}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408d0}, 0x20008004) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7a}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1600.165790][T17656] binder: 17654:17656 ioctl c0306201 20000540 returned -14 21:46:17 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) dup2(r0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 21:46:17 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x40, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x40000, 0x0) 21:46:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:17 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x174, 0x0, 0x4}]}) [ 1600.409929][T17674] binder: 17671:17674 ioctl c0306201 20000540 returned -14 21:46:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x500}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0x0, r6, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in=@loopback, 0x4e24, 0x6, 0x4e23, 0x20, 0xa, 0x20, 0x80, 0x3b, r4, r6}, {0x400, 0x0, 0x61, 0x6, 0x40, 0x7a, 0x1, 0x80000000000000}, {0x3, 0x2, 0x1, 0x7}, 0x7f, 0x6e6bbd, 0x2, 0x0, 0x3}, {{@in6=@loopback, 0x4d4, 0xff}, 0x2, @in=@remote, 0x3503, 0x4, 0x2, 0x6, 0xa8, 0x7fffffff, 0xfffffff9}}, 0xe8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) open_tree(r3, &(0x7f0000000000)='./file0\x00', 0x800) r7 = dup(r0) r8 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xa06, 0x208000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r8, 0x4008af23, &(0x7f0000000140)={0x2, 0xe2b}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000cb819800000000000000000"]) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) uselib(&(0x7f00000000c0)='./file0\x00') [ 1600.610876][T17684] binder: 17682:17684 ioctl c0306201 20000540 returned -14 21:46:18 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0xb, 0x4, {0x0, 0x0, 0x6, 0xfffffffe}}, 0x20) 21:46:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000180)=""/47) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e60, 0x0, @loopback}, 0x1c) r3 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r3) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000180)="45e9aed12f060000000000000025d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc00000000000000000000000000000068e9d3a60a6638d888e6b924fa38e50ac9a54e6717be51823a60c823ae54f0f62e726a997709e4f607e04587cc1e6ffdd38bac11", 0x7c}], 0x4, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[]}, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) 21:46:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x3000000) 21:46:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x600}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:19 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8321], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="020001020600f8ff"], &(0x7f0000000540)=0x8) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000004c0)={0x5, [0x3c7, 0x2414, 0x6, 0x2, 0x9]}, 0xe) [ 1601.692977][T17706] binder: 17705:17706 ioctl c0306201 20000540 returned -14 21:46:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x700}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1601.903734][T17717] binder: 17715:17717 ioctl c0306201 20000540 returned -14 21:46:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x2000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1602.083625][T17721] binder: 17720:17721 ioctl c0306201 20000540 returned -14 21:46:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x3f00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x4000000) [ 1602.276920][T17724] binder: 17723:17724 ioctl c0306201 20000540 returned -14 21:46:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1602.860859][T17732] binder: 17728:17732 ioctl c0306201 20000540 returned -14 21:46:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4800}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:20 executing program 1: sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x21, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) accept4(r3, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x464, 0x0, 0x70bd2c, 0x25dfdbff, "35886ac6b6e6fbbdaba67cc289327dbaa4bf3902fab57c320a26892611fce1acb35f193223676143863dcd0fa45c293f607f61de577b6d1636b7d9661ab3eb0aaece06070130ee2902", ["", "", "", "", ""]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) [ 1603.064911][T17736] binder: 17735:17736 ioctl c0306201 20000540 returned -14 21:46:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4c00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1603.288722][T17756] binder: 17755:17756 ioctl c0306201 20000540 returned -14 21:46:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044040) prctl$PR_GET_CHILD_SUBREAPER(0x25) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x130, 0x0, 0x1, 0x103, 0x0, 0x0, {0xc}, [@CTA_NAT_DST={0x7c, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x7, 0x6]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000}, 0x20004887) 21:46:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xa000000) 21:46:21 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f00000000c0)={0x69, 0x5, 0x7fffffff, 0x10800, 0x2, 0x5, 0x9}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x7fffffff}, 0x1c) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000040)=0x200, 0x4) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:46:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:21 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) bind(0xffffffffffffffff, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x3, @broadcast, 'caif0\x00'}}, 0x80) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(r2, 0x89e9, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="200020007000fedbdf25040000000500010000000010"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x10006095}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x54}}, 0x1) 21:46:21 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1603.946972][T17765] binder: 17760:17765 ioctl c0306201 20000540 returned -14 21:46:21 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000140)={0x0, &(0x7f0000000040)="a64eeded7c53623ae051b5593e5d6244cc224847b07b0fd9ae779f4f92f88da324d66ed2d1aa14fb44bafd4f98345b36937ff3abed21db72ebbbcf2322b7be3cc59e5cd2ebc71e2437b058bcd13a2bd8dee6f3ad6e5e59205ed6823afffadd1afe42fcf2cbac59e53ecd9b626b6f18171ca1683fdef0b626d22b1d31f437e3c4087a1b39c1e9879c834d532fa38e0b8e5f8a9a0fc8f1e06face9f950c4e0dd0010fb1df1658680d01af9e08baceaa7f34f40bd75f3e6369247110819db626e20a734c9ed0dc645f34b483189", 0xcc}) 21:46:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x101000, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffa) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r4}) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r7, r6, r7}, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r6, 0x4467) 21:46:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x60ff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2403, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000180)=0x80000001, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) sysinfo(&(0x7f0000000080)=""/129) 21:46:21 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) [ 1604.187084][T17784] binder: 17782:17784 ioctl c0306201 20000540 returned -14 21:46:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6800}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1604.409562][T17795] binder: 17794:17795 ioctl c0306201 20000540 returned -14 21:46:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6c00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1604.630255][T17801] binder: 17799:17801 ioctl c0306201 20000540 returned -14 21:46:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xe000000) 21:46:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7400}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:22 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x202, 0x0, 0x0, 0x10000007c) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r0, 0x0, r2, r1, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r3 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r3, 0x0, 0x202, 0x0, 0x0, 0x10000007c) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r4, 0x0, r6, r5, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r7 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r7, 0x0, 0x202, 0x0, 0x0, 0x10000007c) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r7, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r8, 0x0, r10, r9, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r11 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x4}, [{0x2, 0x1}], {0x4, 0x4}, [{}, {0x8, 0x6, r1}, {0x8, 0x1, r5}, {0x8, 0x4, r9}, {0x8, 0x4, r11}], {0x10, 0x1}, {0x20, 0x2}}, 0x54, 0x1) 21:46:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5) 21:46:22 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) 21:46:22 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @broadcast}}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:22 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) [ 1605.100271][T17811] binder: 17808:17811 ioctl c0306201 20000540 returned -14 21:46:22 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x800) 21:46:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7900}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:22 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xa, 0x200, 0x6, 0x7, 0x47c, r1, 0x10001, [], r4, r6, 0x2, 0x1, 0x2}, 0x40) 21:46:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="010000004789f6c674b00f130aa2bf98c92f69b142c3a7dae38107063a7896829f51ae7378cfd551dab612729148cd01f919a6082e0a582225e2175f938b79653b44ab6c543d71dc40435c35440500e7913d91235c43dcc615793b7bcc22253418aea2d01ed40fa64a0811fa545bc0b4fc667c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4001fe) ioctl$RTC_PIE_ON(r4, 0x7005) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000500)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}], 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000000040)={'syz1\x00'}, 0x45c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0)="583d4abbe7", 0x5, r6}, 0x68) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r7, 0x7fff}, 0x8) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) [ 1605.372945][T17837] binder: 17836:17837 ioctl c0306201 20000540 returned -14 21:46:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7a00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1605.571590][T17855] binder: 17852:17855 ioctl c0306201 20000540 returned -14 21:46:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x14000000) 21:46:23 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 21:46:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xb900}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:23 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:23 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0x400}}) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1605.901398][T17864] binder: 17861:17864 ioctl c0306201 20000540 returned -14 21:46:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x3b) prctl$PR_GET_CHILD_SUBREAPER(0x25) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000004c0)={0x3}) 21:46:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xff00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:23 executing program 0: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{0x5, 0xdd}, {0x81, 0x40}, 0x1f, 0x6}) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:23 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x280000, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000e83af4f7adfa8cc023e3823e194f8f1269d2e0e7126898c7f9e12df6a8e349ef9039091b32b6689d277e8cafefa32dc8e6cba5a4c0a3f1c0fd93f272c8dde53d1f0a0ae2ec6846720f3d4795bf85df1ecd2612bd0b5ff966cac8058d9f3d80bd16f8ca94664b732f0cf71c1e99ab917d09cd66ce1e1accf9ca1634f5", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r5, 0x82d3, 0x10}, 0xc) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x400, 0x70bd25, 0x7fff, {{}, {}, {0x14, 0x19, {0x7f, 0x35c4, 0x6f0, 0xfffffffb}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000004}, 0x40000) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, &(0x7f0000000040)=0x7) [ 1606.157128][T17881] binder: 17878:17881 ioctl c0306201 20000540 returned -14 21:46:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x306701}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1606.365916][T17894] binder: 17892:17894 ioctl c0306201 20000540 returned -14 21:46:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x3f000000) 21:46:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x307400}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1606.539885][T17900] binder: 17898:17900 ioctl c0306201 20000540 returned -14 21:46:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x400000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1606.730218][T17904] binder: 17903:17904 ioctl c0306201 20000540 returned -14 21:46:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x506901}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x53b000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1606.922155][T17907] binder: 17906:17907 ioctl c0306201 20000540 returned -14 21:46:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000100)=0x1, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x40, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x748a0000, [], @value=0x9}}) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0xe24, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x6}, @in={0x2, 0x4e24, @private=0xa010102}, @in={0x2, 0x4e23, @multicast2}], 0x3c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000240)=""/201, &(0x7f0000000180)=0xc9) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x3, 0x7fff}, 0x8) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1607.096512][T17912] binder: 17910:17912 ioctl c0306201 20000540 returned -14 21:46:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x73a000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1607.291926][T17920] binder: 17919:17920 ioctl c0306201 20000540 returned -14 21:46:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r6 = dup2(r5, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x6) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:25 executing program 0: memfd_create(&(0x7f0000000040)='(%\\\\\x00', 0x2) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) 21:46:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x743000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:25 executing program 0: ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_INPUT(r3, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1608.087275][T17934] binder: 17929:17934 ioctl c0306201 20000540 returned -14 21:46:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x40000000) 21:46:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x790000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:25 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x4000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00000004c0)=0x2, 0x4) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT=r2], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0xa0d2, 0x1, "a5d36911ed45bea0ba583db560591938cc0cd58b0d02fb769a186b9e1e32aca4", 0x52, 0x1000006, 0x7, 0x8, 0x80}) ioctl$TCSBRK(r0, 0x5409, 0x10000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0x2) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="d2fc374a5883634822dfad80f31a009f1e187d50b7f3cfb5d4195f3f069db673a9da60115ba60a5e406e290709989ef15513e7a70216f26f441879493e297d0d7a9b416e85bcec85cea19765", 0x4c) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) setpgid(r4, r5) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000100)) 21:46:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x1) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x5, 0x2, 0x5, {0x8, 0x5}, 0x8, 0x9}) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2d, &(0x7f00000000c0)="d9f7e36d445ae471ba0a15c0b44a4b270ac54d0878a3f694a9d52aefd9d9eae1f99661f6c154a8621e994e3681705f387776ef17586ed96dfe31c29608c0d9a6c141df52e12d0bcba94f0782e360336eb120acda057e615b017775d7b2d99713dad91546974f1302124155f250986b5ad50e2a8ef65f3620c280cd79960e32221561dc77c9a223f27b", 0x89) [ 1608.374672][T17949] binder: 17946:17949 ioctl c0306201 20000540 returned -14 21:46:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xa07300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KDENABIO(r1, 0x4b36) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x3, 0x1, {0xffffffffffffffff, 0x0, 0x80000001, 0x2, 0xca2}, 0x4cad}) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/154) mq_unlink(&(0x7f0000000000)='em0vboxnet1mime_type\x00') 21:46:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r3, &(0x7f00000004c0)='memory.swap.current\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r0) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1608.564121][T17959] binder: 17957:17959 ioctl c0306201 20000540 returned -14 21:46:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xb05300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/112, 0x70) prctl$PR_GET_CHILD_SUBREAPER(0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_TSC_KHZ(r3, 0xaea3) [ 1608.795245][T17970] binder: 17969:17970 ioctl c0306201 20000540 returned -14 21:46:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xb90000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:26 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) recvfrom$unix(r0, &(0x7f00000000c0)=""/213, 0xd5, 0x12000, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1608.998292][T17982] binder: 17979:17982 ioctl c0306201 20000540 returned -14 21:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x5b120000) 21:46:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x1000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1609.951912][T17999] binder: 17994:17999 unknown command 553631744 [ 1609.968979][T17999] binder: 17994:17999 ioctl c0306201 20000540 returned -22 21:46:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x60000000) 21:46:27 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=0x1, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f00000000c0)={0x0, 0x8001, 0x7, &(0x7f0000000080)=0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000100)={{0x1, 0x3, 0x7, 0x0, 0x4}, 0x0, 0x9, 'id0\x00', 'timer0\x00', 0x0, 0x2, 0x9, 0x4, 0x9}) 21:46:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setns(r3, 0x20000) 21:46:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x1673000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:27 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) [ 1610.315711][T18009] binder: 18004:18009 ioctl c0306201 20000540 returned -14 21:46:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x1695000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:27 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:28 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) [ 1610.546697][T18022] binder: 18020:18022 ioctl c0306201 20000540 returned -14 21:46:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f00000002c0)={0x8, 0x8}) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1a80248}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x108, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x7ca6718cc8f319c2}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x200}}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, [], 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x24000815}, 0x40d0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000040)={0x1, 0x249}) 21:46:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x2000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:28 executing program 0: r0 = socket(0x26, 0x800, 0x7) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000035c0)=[@mss, @sack_perm, @sack_perm], 0x3) 21:46:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x9effffff) 21:46:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unlinkat(r1, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:28 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000040)={0xf14, {0x5, 0x10000, 0x0, 0x7ff, 0x7, 0x8001}}) listen(r0, 0x400000001ffffffd) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x300, 0x70bd27, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800d1da1f51c0e983e8c445e02a1f7a440000", @ANYRES16=r5, @ANYBLOB="08002cbd70000000000001000000000000000c410000000c001473797a3000000000"], 0x28}}, 0x0) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000280)=0x10004, 0x4) [ 1610.772501][T18039] binder: 18035:18039 ioctl c0306201 20000540 returned -14 21:46:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x3000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000000c0)={0xc21b, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000100)=""/96) getrandom(&(0x7f0000000000)=""/96, 0x60, 0x3) [ 1610.967348][T18052] binder: 18050:18052 ioctl c0306201 20000540 returned -14 21:46:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:28 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1412, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40090) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200), 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000006b40)=[{{&(0x7f0000000140)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)="2cbbae8c0eadd13b66da148c6033f5d3af62ec7b6996496dc694b03104fa0b80e096ed097a7df1e9d927a9b6712930e2a186cbf4b52236b7396579e1ec4adff79748b1c51522bcdb73673aef552fe354ae3e18c38f7a79a80e75c8bf3fd3c6cb22d1b18b2da0623c2ef65b3c306835a86576e6bd205135aaa06a4b479f9c60c315ea4aaa3991a0377679ffedbfcf80b8bee341324191c6a7e6e31e90c7654b55d104c3a3a663e413c2ab1a9e28acd928f74807f1677365d036986813517be119cfb7519d19e50eb03f09ff58192c4de688b2", 0xd2}, {&(0x7f00000001c0)="479123b94166e409084412dfb9bff876d90f13fcae85586d12e79ade88312c524c93bb8038b0fdd35936", 0x2a}, {&(0x7f0000000340)="5fccfcaacbc99ac75e5b6c137d111175e9d39c7ec12f4b3e859294a429a699ee89db5f61bc74311877125473fce61d67765df8c48834e55c5aa1cc1aed734ffc0bb8cd899bef82851705d73930d84c645ed06969522aecc1f6de09b18e385058aaebc80c922684b92e52e2709c5d86f440d7fa702cccd3899bd1690ce45685547a124ba7e7df85d8576986eca2d7b73e5da1564ea15e5748105a", 0x9a}, {&(0x7f0000000400)="1b873419fbe773965b770aa27d9a5f55c9fd343722402ba3958568b6d20a13996e70bab8b70fbe961a94dc5d64d401b06ea0dd522edb0038e09133d1a29d92564ee626397593c047b37cc36392d0e18b980fa465e51787c198c514189909b43455667718c23446ea2d5c28a36c1d685a4bcecbf138373ee8e5627677a0d47ca290bff11f08de18c58aa9704b6d27658ec669d71a9fe8d2c635e84f6fcbdc5a986b8960cbf29276f5705448c891bf2e2e9baf2750ee44e53114d17b63e583cf0c5d93fbf16c7e3ba4b904", 0xca}, {&(0x7f0000000500)="12fe853d9a3cd41481127a58ba34eb324deef07cf474fdbb54eb5906f47c3f0cfb99ee85dc50483035825e2045feba43b366e43a20680472c4132915c59238658abd1178599ff7a975611ba5d13fc9e150602a779bae", 0x56}, {&(0x7f0000000580)="a367d18be0a5e73b3fbbfee55778d80845693785df24fc0035c5c658ea888cc07b37af59912190721e4b143228587b075a672e969a542af71b375d9dd2470c48fc9a8343e0b34046e2dd2c9d6d6880359a1620c6c53cf5e7fe822a0320690a1e46ef27ef62ce90cd22622b42d60c49506f3b7fcc105455766b786e8029cf9179f8e5c3e36ea7dddec4f576f3bb8d1e3e263176a905469beaf56448350ff34c9810aeccdb2fd6d0f900e11ed37dcf8eeb3f6af0f78993e1fb3ba41e2c241834753e86ac", 0xc3}, {&(0x7f0000000680)="40a649d40ee46ad2f680dc203f634f1e0b27e80d3e82e80816b9d171e1a55c03917de43e309e7e396ddb173d15d6bb70411718f561d1048bc0b608879f5fff92ac52edbeb16cdc", 0x47}], 0x7, &(0x7f0000000780)=[{0xa8, 0x101, 0x4, "40525f6ac380f025ee10dc49abe8a20d7d04b58cdfda62da8ff769ebfa4d3c39d2494b2340ee9eb5de383817ee894de53492d4f58737eb911fecfab3bd53df514ee65525773ecbb4abfc232911f7986d2208554e450a5726805bc1046c23247149517c4c9f0a9822b8422fa2253602048712e60fe7183a90aad7fb08b19212195bee0c7dc16528538e9f4d7164044541321426482b"}], 0xa8}}, {{&(0x7f0000000840)=@in={0x2, 0x4e23, @private=0xa010102}, 0x80, &(0x7f0000001940)=[{&(0x7f00000008c0)="0ef6", 0x2}, {&(0x7f0000000900)="06", 0x1}, {&(0x7f0000000940)="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", 0x1000}], 0x3, &(0x7f0000001980)=[{0x88, 0x100, 0x2, "077b0c8723a72fa375fb8f918db51cc76ff87a5e5f5b0d4df2b55ab94dcba14e3cf8648318dca8bccc41f43d0efcfa96035347cb6d06e0c9652f548d92cb0dea4e45f62cc6c30357f3638fbcc7f32380b4ccabe264561fb3fe01bc6ba5cc287513397cf04cf4ebba4f578b299db77ca5f5a0"}, {0xc0, 0x118, 0x0, "ab23b1cc9611ffa1d9c4589c23f4d1fd1918008d2f7cc6f3b252cd7259456f556d5ae7fb74078837c2dc2428808392587404e8778c27c6c12a10166ccb97bcafd9aa62bc7c29a91b3f98a966b7e97eaccb423522fc72b3b3563d03eea3f0315ccf47db867e30e25b25547d3ed70ab94ff10a9f0f13f77ea53ec3b386c79950aec10e85054cacc1d59484cdd0e1e8a8dfb1abceca675e2d88806f539e44be89c640f8650af8b240c3a7f07f28ffcd75"}, {0x60, 0x10e, 0x401, "852f54663197ece6d77f9f9839a86019841148a62f7a21eae7acd1540329908f93e1b7cfa3ff91911a98863aa6d7b272e6c37b3db3e091962845a32f7db4ffecff0f264e32b2103717726eafff"}, {0x18, 0x104, 0x1f, "a2a4"}, {0x100, 0x118, 0x3, "95542468a3bca5d3fa014e21d8202b37f5e6258231e2bd98e13c48f483135e8963566851ba92d1ecf51b477750bf6bbc71157b4da6dc06a275080282e33d27215e126e9042f53287eb20f5f48a0efe90a71ede7d7bf84d74a1cd7b3c989237c1638f3b7a94c98fd14a6918308f7b8c22fdf61adf857a2005df539590db659de564025c62a8e635cba36a3de7b0fba3401fe7b16c9b90409232a960e0dd1ce404feefcc9249fb7fa13057b0332b862c4a73cb3d61677e22964fe739ba118dc01837f62d720a5301f779241f202097d49713f70cef79f39387998c0d2c348e1d8bf0d8f61940224beb4af6f3"}], 0x2c0}}, {{&(0x7f0000001c40)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x3, 0x2, {0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000}}}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001cc0)="ba5b028ce0b93d0c487373436c40360d8e1a6283659316d50ee135d13f6fdf4631ad35718b5efee70a3ddfd443748968b4d3c5a8d41e4f7753d0744a0026dc", 0x3f}, {&(0x7f0000001d00)="b99266cdaa9be25edb4af999fa2d3251932ab1c58c38df56da735d6155845f4e7652a00e1f86", 0x26}, {&(0x7f0000001d40)="372001616021bb142d58462112020fd76d83c614ee0c16f484fd1af5b36263cfcbc8f6f3143ae9b51be01cb1e3c41c3bcc5f358363a6066f47a3971a438560c5424609bc43dca8a6dd045fca0ea65d6666b7405dbe54612413014aea1bb45a218739d4148aaf2d875efbf67560ee1b15b4c6e6893ceb40944c0c20e7ebdfcc117d5d921ffade902abbb611750c221dea2913f67d48d94358739c02bd6acee82a05fb0b117d790cf35024962c4e9fa98df17c3a2b37f573c0952c62fdf05cc56aeebdfb031c4c7234d2ac847c3946519a75d2af9a14648cbd5733fcc4553ecfdef124e917512d72fb97af406194f672fd4ea0b2c08fbe60e91596fee93560", 0xfe}, {&(0x7f0000001e40)="3b3becfe36228c11126ae3077f5727b6379d2da76f55dd78ba83ea04c9967fb02541fce2f033e3bf98ab0dada7939db3e707f2a8ff4b00716d6a3bd86af987e901e5eea502d17c243dfad317d7c224fd10964f569bae15ede4b82bf61ff9e5e905936f9537fd00b91510ad5a23385ea7862a3a4647f638", 0x77}, {&(0x7f0000001ec0)="d1cc6b0d5ca13092bd5677776ce5d7196d458f9c686f927937a6558c08a4d18c59d065e607aa21d0b8708c6b065841d04c574878390e0a15f9ca2d22fca3b79ff90ff8042fb6ba4c9a3012afa6f05b1cb2d50c0c2260d0a3424706e2537e4ecd1ba6108b2309a75a66d8e334a974d90b5703f2e1d2a345be28d2ac2fffdb50ed4caa086ab66a8fd6bf4eaa21e34fa8acd3f71695d94ae71a811eac6c94176f1052ed455e2b6a2ac106e27a34feb2970afb3ed43de080", 0xb6}, {&(0x7f0000001f80)="b309a9c6498c4346ef0b82dd964ce13425fa9275b236f9a21a2f446de44b576a4ef378231d325d80b28ed5fa45ff72f67012afdb6d3406ca2d06f66669af19817bac2c82fed30bc30fbef304269d793f742ffd1119743c99", 0x58}], 0x6, &(0x7f0000002080)=[{0x20, 0x88, 0x9, "7df25df2a554dfaf794ebd144efb6a0d"}, {0x90, 0x108, 0x7, "8e0dd1b17e07a32ceb00b169ff72e31f9fa8f8b580f8992dffe72b0db9f69d44898671a7fbb311420892a21e8980f3ef9d21d8309e0a8fc4d93dc3fab4360025a3401b3ca74577977626eb1de7cdaf573ba1df9f8024727d3bec53965b32a5ba0eb4c26ab610b1a69d2fbc81849645eb36cd90e03e409ceb4a993fe0d4fe"}, {0xc8, 0x101, 0x583b, "2f0569ef5386250440768aeed73d6209d17d480c70f285e3a80cb0202e03223abca81f3756a0707f89358815640009b58b32e32d1a65c6ef2896f01e0a94c385a78caaacfc71af8feb1aa9e1b86ba25ba6eb2d8f223ebf306e7e83af1403907090dca0c559f834d90bfc0b510934b5ca52f045c8a559c264e94ec52f92baf813b552525b13c60bd16a941750870f390f10859d1d65e79f300c0bae6bfa6bf587afe9885a9a01fede8cd3cc7e87972f0a8d1cfa"}, {0xa8, 0x10f, 0x3, "3f24cba5d507b89530ab2294e915c3eebe9f252bf2e3a82168c3db4337c36b8d33f1824c157f3feb2164695b122d647ba93cdfe2543a87323db0e45f8c0eb7925a2463e97b58819db99f18ac653d065f531be05775c492c1ffb625e09163d698e0a718736054085b1a13693251b984174599fb84a3c3a156020c0497f845da03a95e3520b6f4e9109499c5a1bfa1eb5dded2a406"}, {0x70, 0x115, 0x5, "efd1c4ed80f2f3cd62b51cd135e2a47825ca4448fe55dc330b144c7058f73e598c03970ab00f52633b39b7089ed11d54905d98b15f7c656cd4d7c0f28dcf3e9fdb6045023d36aeffdc9195e4b04981474802e312d042869d7fbef7e8bd"}], 0x290}}, {{&(0x7f0000002340)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f0000002400)=[{&(0x7f00000023c0)="e4ef17eed90b32e7c20b718a905495c666e22929371601c3a0289f980f1282511a1e44d4dd65c353b841aa79e95a09c55dc8601c6c5535f71ec8c55fd543d7", 0x3f}], 0x1, &(0x7f0000002440)=[{0x110, 0x114, 0x7, "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"}, {0x98, 0x10e, 0xfffffffc, "d7e5271921faafa1a2362b6cdb8a3073e7eb72cd709cf591aeee68f77ce36e0dbf9cd2b46ec218cb5807842287e1dca74973fff0b3a971cc51c1371fca42d753eb76ea97a773ae8bbb1983f397798b34577b553f4be9766e0230e13fabeaee4f3aff15d54c402052435b5968a333cafa17dcecc3e803a869166a8cb88963f3d3595867eb42"}, {0x108, 0x10f, 0x7, "d6ad993ef6c524d87a2a716f61fd29560568f21c3383939cf6c6f33eec86a8f7a7f2fba19491a97ee0ee6042e84bc83213875f6668d8078f623a09c819a01af6bb4466369d40522631b1c3284e5f078b5d1ce7e3123ae7e72412be0d4ea093ac97ca4c4240198177318001ecf2812b5ff8125d0ab836e25d4d1140beba6ddb1dc8b7bfa8328bac8b0336699d0d9605c14774aa8c9a6c09ab08140008863c51c1d3d01355145fe7ac72d41e654c82a34e31dd4191c8b6137fb5a3facca46db830283be0cd3f71415d50877cd3793af59d88e785c6c642faf0436d36d18076f43efdeefdeb8bd798593bb40179df321d18c1"}, {0x80, 0x109, 0x101, "04ce96d763cc9cf11e75a8c9a2310ede5fbb9a0dd9d204d0f86f94465bb3f77abde98cbd3a9626e9f281cf9c351b2e3e65c83bbc4f1ce82099371e926a9ae50fe2d84786d1146cb3ffbbfa0fdfdb09704bd5dc321a688754f62b79379af74a782c0780acb562ea84bb634b26462e0f"}, {0xd8, 0x11, 0x4, "28f8f4bee63a26bbc7718502f635e22d5e21420792d48e2666a49f7ef34f89776b923bd55a544649e485a73cd3913fd8807ef053b18bd30a32ff5c9405f3e9ef67dfe2a1a1b58c3a0faa68ba1e986d808e6f51b9e82b3e080e62faef3920e2ff87b3e9ae036b6984735a523762388b9f32d62e4e64e401fd9ac1b25a4ef063b143382301c10fc5613551bb655c52461ef79aa41bb2dc22824e4d644364cd0164e22624a658eaf0f1882e1150ba6fdd97773cf3a264ac39c7bc506b722a12d313f88e83d1"}], 0x408}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002880)="dfd02341a134fcf6536e72d6aca1de39ffae214c94d79ff115ceb93cac8acc585f4d79cea6a4a90a5947a1820de99ed2956e185759121a841a967c", 0x3b}, {&(0x7f00000028c0)="d994ab714062a553246be03f87184eae1a2dd95d0986981c36273be322898fd28d9c42e0d119803b3a94e09bdde6b26230c897e123bbb652978ecd91e75d229e57754075167d256af154d263cd01ae9e9819", 0x52}], 0x2}}, {{&(0x7f0000002980)=@can={0x1d, r6}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000002a00)="f06fcb6dfa109f94d60c4ede80956f40f3cd691baa4593bdb5fc51bf4d653e9f402d117a8091b31765bcc3fcd09ba98997893081f09abfaa94ee8b15a1de269d6586745f5d42305b124543108c538fce477dbad3f16373236cc64fc83e9e94bffb5e409dcd388a9ae1b586b094938be84f0e805624670c365fd931f0714f794370bcf9ecb0dc558752c45f02102313e738aa2435213e27ffb2bbe3ee3484d36ebd58e51d", 0xa4}, {&(0x7f0000002ac0)="9d931c5ac6e4e6406f1da092c2b23924ca1b090847a4ef829ff3851d6f07d7d57864dac1c7eaaab3bed80c45632160c0519e134f6068878afb80fe601f3052ecb80ee9e525d594a51f819aa27689b207d63a0e9367", 0x55}, {&(0x7f0000002b40)="63b7d7aa288b7626cef0cb327a5927569ead1f742897c04cf344724cfe8f966d84a1dd7bd43acbd3a5ce52b21b7dda0ce1067e598cf8a5161a3b0da2088f556bf6cc35e3fed11764a96c29c38d7f668fe3dfa129594d765418acfbcbde6e48edf55609ff7ff8ac76a608ff380cd0", 0x6e}, {&(0x7f0000002bc0)="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", 0x1000}, {&(0x7f0000003bc0)="6261a40a6e358cf55b5ce5e89b2791e09b779e5b24214ef6473d66047297df76023aa6cabe07fdcc1160905b70eefdd684fb1229380564618bdf8777de43388b05eb190d02df722dc585a0abc64544dff6", 0x51}, {&(0x7f0000003c40)="e8d4a646aa5ac036639022fd579966963e32b31f98f7d64c56429ca2e804fbb42975b8f9d1e6e5e22cd6482498af162b4393b3d98e76487ec6c9822b7d107c51e299ac8bcac3d45ab14725624902fa8fa3deddc593b1454ed3a9713576f81f5f7b2ae4a89f3c3c2bd2ecfd3b47334ad4382bcff7a1c7e298548e0e291c705e215168bcfdbe3bfa522527e576cea3f12ab7725f02b432aba2c24c307ff2996640b50f6bbeb568f0e646cc4c0acbc8", 0xae}, {&(0x7f0000003d00)}, {&(0x7f0000003d80)="ba65d04233aca518d099a8f4389c3485ebc1f4611f009ee845bdbeabb5a6f66883d401227366a976044fabf8feaffb06beed2a918856ebee5838a06c9ac415fa", 0x40}], 0x8, &(0x7f0000003e40)=[{0x90, 0x10e, 0x3, "3e2d620b8f3f438c14d043d3ca5961fd1e8333d3d75a2b82a1b6e218f060d9656b135aa65eb4b56e727bfcf90502797f118060989d2c98c98aec05d4a8a283ce539743293966a234a983802924470c906d24e032277a5f51c0f673a6dffee6df3982bb2edbfe45fb768314430fc09667d757f7a78c6ee2cce991c004b6"}, {0x60, 0x100, 0x0, "49d45ea29579eac0f3971eb1bccbfa18c338e38c38837fa4733509e3189ff0e9f167739523b07f31962fe5ef0c6c49710da0038916f6c898722e498527d2f2aca1a358d5ae65b550deb6"}, {0xd8, 0x119, 0x1d285dea, "9d30dc2cedcbd71ce52a12c73918388c6403a9f03594f6e56b3fdcd6844b1094ee5b6f32caaaa6f7842f2650b29be8ee8f0a3488bff177da6b1ef56bbb71267d824c14cb7039dccdc26118b91dbeba1fe1623724ba37ba24a36b48fff80c2e3b7ee3720b4020140bdb0115f2f0edb6a56340815dc8c9e42de7798979dd9ad32fe037b3cf3bf25dddf073be4d0c0d753d1993591bb30427548898196c193ec4ea0c20d128de8d6f9ab8140d29701be1877f35be72dd2b6cbb14cbffdbb212cacc5aa022e974"}], 0x1c8}}, {{&(0x7f0000004040)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80, &(0x7f00000052c0)=[{&(0x7f00000040c0)="955eeec392629ce98e420ffb5b7ad8852c48971c5d0bdb4bbd60cb00c34225eb4c0a6a463ab0cc75450c8607b89ab3969299c13dddba51438af045e937fd32905f996e996915a905609f59ee9cd0c25f59257b3cb2b749a79e345b89d2cb9b2a989aedd9a32a47f7e95b8f218bc4901f4ab45296da0a063a28791cdb2378b5989f725c4f346bd71d09c8b7b9cedd69f511e5c8437b8f5aa0389879c9", 0x9c}, {&(0x7f0000004180)="a11b76d55ee0c9520ccf714834e490a38ded070d7142b7bd5c4436fbd14d646b86a7951de07fa656d63d6ce7daa82cedff7a67ba96c6049513711cb744fb8d8069c50a253824a519e2d2139eafdb1778e8ab44cea064974c2900f91e5b3a7e815410eff1776c565c410c8d19f35c050c297893a4ea3a1677e0f94fd976d2b2727f129a2a6305efcce001014c4de6a7a809d84154b31a995261ef2fcd7a9ed74b70628cb18475c1478ac70994b91e41e04b2f4f825f01dcabcdb5e0d1ef1e82bfcecba39689dcb641609d66ccceb71c50c3fc8a478f7dfcfff55c9fab6ed7", 0xde}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="da4537fe4c11aee14dbf8e0b4ad2fe926e79df0a77942dc79718402353d6876ab19c12dee2a843148a056fcaf8fdec8a55b1567a278743fe", 0x38}], 0x4, &(0x7f0000005300)=[{0x30, 0x10e, 0x1, "f189de153f81c7db34048815f0ad4662c8bb1f6446db7d64329faf52351837"}, {0xa0, 0x3a, 0xffff, "018ae081d85143f74907fed47b1e621a4cb285b7e4270fd3a40009b09cc20ad7fcd0931283831404bc0167fa9f5b0c79e408890ff86e3a5cb82725121d2a640e324a727ab50dbc0add7b28231f014d0fcb60ada65f5a264e7e82c495a52e332342b2ff8ae05b14a7c1f2bfc5821c6eb0a657d885117e4ee5757eeec4756d53b9fd57bd1a2c6e2db32dee8b407c07"}, {0x90, 0x0, 0x0, "732cf9e539bb9fbaad72ea3beeee46c6060df5cbfc287ff5d96bd1ac4f0bb7b5b8e37cdda6ed2c5cf443f03cdcdfcdb40c4ac35ecd2d1432ca2dda59c866395b9ee29133e03ddff7df58ebd6dda5fc4449ea96eb3553a0565d36532b3368dce76e13d4c277650e2b653883bc74f3b8643d88dfc939c5a6395c75b3"}, {0x98, 0x115, 0x1, "bf1960d843eb54d8798f91a297a9a7d939a2394ddf44cf18a694fa34eb56c3ec006819573fb02f8f01b86bc4c7df3124b7f95cde936bac5a0f8320ed0cd8c3e2afc7b8dbe75469c79ee7d7977a7bfbfcd5677aeecaf8a64e97c90b8d208eb13922e776ee51df310acb3cf989172c1ad70b17376e4436baa7f204927051e21aa3c3ce0a7f718a"}, {0x98, 0x104, 0x8, "a5cd70afa0ca08bef1d2434b2b1bcc1a69bea4537aa7a020adb9aca6817568d364335d8a792c23a3ab7591a6037edbc0b3aa581ae4d2b85e36b5aa0c5fd2a5226aac2d2fba9e22d42ab6ab2697aa24f680259ee9cbb03235abfc09af062c15e5ca3b959616d5969b569bfb79c78d4f9331c393c4b1270ad6e6384ebd9baeaabefc"}, {0x20, 0x394, 0x9, "d8f6a053a694ee2deae01e4c2e"}, {0x38, 0x84, 0x4, "99da21acc6f7aa3b7a84ab99987152ea9a8cb9d21add104921f5acd87ef4f0d259684102397755"}], 0x2e8}}, {{&(0x7f0000005600)=@l2tp6={0xa, 0x0, 0x6, @private1={0xfc, 0x1, [], 0x1}, 0x4, 0x1}, 0x80, &(0x7f0000006ac0)=[{&(0x7f0000005680)="378f1e1eb30127d40093f152ca939f4ce7eb0c1edb919d862c55f9d28026312b07911b00642d48d1861688d0ea3ecf1aa245d4f20a1c3cba9c348886930be5b229d705450c61c2245a9f1af58c111bf0bdb81b62a64d7675fe09ba77ff3eed61b4ed2be3d20312262fd98653b276680ba7463c265b7ca8648dc09e0aef701041d7314fce8ee89ef44820755b1c8e5d3cb40206a30d7e0e0ccbde158e035af163de63ee5ca9974e7b98404c67e9", 0xad}, {&(0x7f0000005740)="ba95b7bfd9194dce4aa39e3cdcfd39f19d7f93c39a97b2bea56dbe7c7253b03e698f54e253be4ed2e65196bab2324dcc4fc9670d0df614f2d633a002e969f96efd3e3573640926511410b14de9b9b77deccc7511aeb9057ba0046eb499d6ecc745b10a191b8968a2c2ca8c98a1615cabda0779bd57fe7813", 0x78}, {&(0x7f00000057c0)="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", 0x1000}, {&(0x7f00000067c0)="d4653c145150f458a884efaa81b40723bbd0dc45362a375cd2906ddd2678f383d281dc5a1467394be77f33af9fc5eb9bd8e3262fee04169c62c92aeb4a06387275a82abde421ea0bec563542f8c5802c785e346ec4033ca2048d76efd19e112611eb97338bbdbf1ff26e233db06fea4db37adc4d640a61757f45fde0707a05c3f369d98a5e3e8fbbc1c875a5f8f15876437bac19771489a59e4fc9d6db1879e8a040ec9d7cc30c515eca9cff3c4456e1f776f2936342375c7c2f9ebeb3157b69deca00cc2801a6886895efb2c06c95c3d731a94cdb1d23c4b6c76db6e9", 0xdd}, {&(0x7f00000068c0)="d44e66292305184a399b6abf0c7c8999cd3029def614e1957bf256244d95d1be449bf6de16c591aee24e64daadfba83211a3428a0f726c4f5d01e0ed4f57f0e2d6b4f4e5b7195a4d6cdb890fa72fd65d398fc6d1c54a5cfe88fe3665c6e35abaf098767c80c385557700c34cf6eb8a720e44c0648637efb2b4de7e58325d0430ef5825058f99619227d8e6e07e1b416d00d953e491505815eec7aaf1ffe2d6f5e4dc10", 0xa3}, {&(0x7f0000006980)="5b9eb4ebe3ee8d78aa03f4996c691134afa7ff29f832cf764afe424cd96eb035c95dce72e3d1126d3070ffe68ac265883691adf1ff4ae682d07162262248fb3e0dd8d37f7eed3b77fc65132f164b9f076a749a97565f46bbb92aad0ce1963f32bee67c57435332771f64a743bdede2af520f2041179769c24a39231fb3d8425d69bded1243", 0x85}, {&(0x7f0000006a40)="4d552e23348128f52430562e283a3a0f4a9989ea3791aadd5bb708e075b8f3691a66b479d76c39170fa3b40fabcae25d95137358365ea8060e5707533acc8a7cf4d4fa6069ef61c54fd41c3293969d0cc85ed84a5811b57b8f9837a389ff0d3a81c001cc9d5b30c6f5342394b60c58719e13eedc34674bca9c3f95217649b7", 0x7f}], 0x7}}], 0x8, 0x881) 21:46:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5c) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f00000000c0)={0x0, 0xffffff18, 0xfffeffff, 0x5}) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1611.176853][T18062] binder: 18059:18062 ioctl c0306201 20000540 returned -14 21:46:28 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000000)) 21:46:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x5000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1611.386369][T18079] binder: 18078:18079 ioctl c0306201 20000540 returned -14 21:46:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xf0ffffff) [ 1611.571954][T18092] binder: 18090:18092 ioctl c0306201 20000540 returned -14 21:46:29 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001ff) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r4}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r5) keyctl$unlink(0x9, r3, r5) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:29 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff2, 0x2b0080) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f00000000c0)={0x4}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000040)={0x0, 'ipvlan0\x00', {0x3}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1611.770159][T18099] binder: 18096:18099 ioctl c0306201 20000540 returned -14 21:46:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x8000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xfffff000) [ 1611.972029][T18108] binder: 18107:18108 ioctl c0306201 20000540 returned -14 [ 1611.975222][T18115] 8021q: VLANs not supported on ipvlan0 21:46:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x20000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:29 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x18, r3, 0xf07, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3d2fbdaf}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5d}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x4}]}, 0xc8}}, 0x10) [ 1612.177752][T18117] binder: 18116:18117 ioctl c0306201 20000540 returned -14 21:46:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x3f000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:29 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socket$inet6(0xa, 0x1, 0x7fff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x75) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f00000004c0)={0x2f, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x101, 'ovf\x00', 0xa, 0x100, 0x65}, 0x2c) 21:46:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x48000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1612.371182][T18125] binder: 18124:18125 ioctl c0306201 20000540 returned -14 21:46:29 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x4, {{0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, [], 0x1}, 0xc5e3}}, {{0xa, 0x4e20, 0x20, @ipv4={[], [], @remote}, 0x3}}}, 0x108) 21:46:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xffffff7f) 21:46:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xffffff9e) [ 1612.566625][T18139] binder: 18137:18139 ioctl c0306201 20000540 returned -14 21:46:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x4c000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:30 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18) timerfd_create(0x8, 0x80000) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000000c0)={0x9, 0x108, 0xfa00, {r3, 0x2, "4996f6", "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"}}, 0x110) [ 1612.805369][T18147] binder: 18146:18147 ioctl c0306201 20000540 returned -14 21:46:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x60000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1612.999799][T18158] binder: 18157:18158 ioctl c0306201 20000540 returned -14 21:46:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x68000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xfffffff0) [ 1613.201475][T18162] binder: 18160:18162 ioctl c0306201 20000540 returned -14 21:46:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x6c000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:30 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000040)=0x9) [ 1613.398514][T18172] binder: 18170:18172 ioctl c0306201 20000540 returned -14 21:46:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x74000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x1000000000000) [ 1613.578508][T18180] binder: 18179:18180 ioctl c0306201 20000540 returned -14 21:46:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x7a000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1613.792003][T18184] binder: 18182:18184 ioctl c0306201 20000540 returned -14 21:46:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xff000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xf0ffffffffffff) [ 1613.982422][T18190] binder: 18189:18190 ioctl c0306201 20000540 returned -14 21:46:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xff600000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1614.199010][T18195] binder: 18194:18195 ioctl c0306201 20000540 returned -14 21:46:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0xffffffff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1614.428076][T18199] binder: 18198:18199 ioctl c0306201 20000540 returned -14 21:46:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1614.621018][T18203] binder: 18202:18203 ioctl c0306201 20000540 returned -14 21:46:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x2}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1614.801926][T18206] binder: 18205:18206 ioctl c0306201 20000540 returned -14 21:46:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x3}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1614.995775][T18209] binder: 18208:18209 ioctl c0306201 20000540 returned -14 21:46:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x100000000000000) [ 1615.245281][T18213] binder: 18212:18213 ioctl c0306201 20000540 returned -14 21:46:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x5}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1615.490972][T18217] binder: 18216:18217 ioctl c0306201 20000540 returned -14 21:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x200000000000000) 21:46:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x300000000000000) [ 1615.720251][T18225] binder: 18223:18225 ioctl c0306201 20000540 returned -14 21:46:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1615.878614][T18232] binder: 18231:18232 ioctl c0306201 20000540 returned -14 21:46:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x8}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x400000000000000) [ 1616.067948][T18236] binder: 18235:18236 ioctl c0306201 20000540 returned -14 21:46:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x48}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xa00000000000000) [ 1616.307750][T18241] binder: 18240:18241 ioctl c0306201 20000540 returned -14 21:46:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4c}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1616.487598][T18247] binder: 18246:18247 ioctl c0306201 20000540 returned -14 21:46:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x60}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000080)={0x0, r4}) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1616.668225][T18251] binder: 18250:18251 ioctl c0306201 20000540 returned -14 21:46:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x68}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xe00000000000000) [ 1616.870099][T18260] binder: 18258:18260 ioctl c0306201 20000540 returned -14 21:46:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x1400000000000000) 21:46:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6c}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, 0x4) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2107000000ea0700000001000000"], 0x14}}, 0x0) [ 1617.054729][T18267] binder: 18266:18267 ioctl c0306201 20000540 returned -14 21:46:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x74}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1617.270975][T18273] binder: 18272:18273 ioctl c0306201 20000540 returned -14 21:46:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7a}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1617.443300][T18276] binder: 18275:18276 ioctl c0306201 20000540 returned -14 21:46:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1617.613470][T18281] binder: 18279:18281 ioctl c0306201 20000540 returned -14 21:46:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x500}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1617.804446][T18284] binder: 18283:18284 ioctl c0306201 20000540 returned -14 21:46:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x600}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000040)={r4, 0x81, 0x5, 0x9, 0x3, 0x7eb}, 0x14) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r5) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r5, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1617.986120][T18290] binder: 18289:18290 ioctl c0306201 20000540 returned -14 21:46:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x700}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x3f00000000000000) [ 1618.152511][T18297] binder: 18296:18297 ioctl c0306201 20000540 returned -14 21:46:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x2000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1618.329316][T18302] binder: 18301:18302 ioctl c0306201 20000540 returned -14 21:46:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x3f00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x4000000000000000) 21:46:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x5b12000000000000) [ 1618.577258][T18307] binder: 18306:18307 ioctl c0306201 20000540 returned -14 21:46:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1618.767770][T18313] binder: 18312:18313 ioctl c0306201 20000540 returned -14 21:46:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4800}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 1618.992632][T18319] binder: 18318:18319 ioctl c0306201 20000540 returned -14 21:46:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4c00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1619.183304][T18328] binder: 18325:18328 ioctl c0306201 20000540 returned -14 21:46:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1619.367483][T18332] binder: 18331:18332 ioctl c0306201 20000540 returned -14 21:46:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x60ff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1619.555453][T18336] binder: 18334:18336 ioctl c0306201 20000540 returned -14 21:46:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6800}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1619.726975][T18340] binder: 18338:18340 ioctl c0306201 20000540 returned -14 21:46:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="61fe2009acb9b07d937c150eb8a442cf35673d61d7a1f285fe518c2c15e74743dfc99b97d3a7802ca60e728272cc56db9118b1e6e9b6aa8ba3987525a6fad8", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x3}}, 0x0) 21:46:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6c00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1619.960582][T18349] binder: 18347:18349 ioctl c0306201 20000540 returned -14 21:46:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7400}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1620.155114][T18353] binder: 18352:18353 ioctl c0306201 20000540 returned -14 21:46:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7900}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x6000000000000000) [ 1620.351003][T18356] binder: 18355:18356 ioctl c0306201 20000540 returned -14 21:46:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7a00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1620.529769][T18361] binder: 18360:18361 ioctl c0306201 20000540 returned -14 21:46:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xb900}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1620.717253][T18366] binder: 18365:18366 ioctl c0306201 20000540 returned -14 21:46:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xff00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001a40be17cd76e9c3c27c20c8841d7f1be6b232a36b003f9bc3dbb87eaf5a478b00f02095d57425911da79220208a03db5fa9cc9a8b290489fcfd36ab88ebea5f7e6793b356273945be52187c96", @ANYRES16=r2, @ANYBLOB="33040001001000"], 0x14}}, 0x0) 21:46:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x9effffff00000000) [ 1620.909882][T18373] binder: 18370:18373 ioctl c0306201 20000540 returned -14 21:46:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x306701}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0x0, r5, 0x0) ioctl$TUNSETOWNER(r3, 0x400454cc, r5) write$P9_RLCREATE(r2, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x20, 0x4, 0x7}, 0x8}}, 0x18) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="c65d3bed1065eacda170e60713b3bcbe80e2b72dae965d8efa4836c1b510b1af59f0e49306fdff2263be5b3cc6378a07514613b16e7b331e32222336dfff33942d279f0e9545878f76f9d9f56ede74a5d14337ab702dc27cdee98306bcb8bd1dfc5341506ba9f43e93ddaf73a0ae01b78b1ac25b7107c2c97cff66d47251d67482e67a11f2c4cce04295f45ef8ffbc888de0ca94de5929599eff8df96857680d5c450dc5bf55ac2285de15060bb0d7d749d217270b5e34ad476860883cebfefd5d37bf8a7f1bea3ec7203a32cf7bb004dde044657de16e711c7a0df11013655b9a6ba260bf33af39baa70dc551bcb165cab17f1b85ac00"/261, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x10) 21:46:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xf0ffffff00000000) [ 1621.160641][T18381] binder: 18380:18381 ioctl c0306201 20000540 returned -14 21:46:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x307400}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1621.330795][T18391] binder: 18390:18391 ioctl c0306201 20000540 returned -14 21:46:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x400000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xffffff7f00000000) [ 1621.509439][T18397] binder: 18396:18397 ioctl c0306201 20000540 returned -14 21:46:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x506901}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xffffffff00000000) [ 1621.741100][T18404] binder: 18402:18404 ioctl c0306201 20000540 returned -14 21:46:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x53b000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0xfffffffffffff000) 21:46:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x73a000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1621.933133][T18410] binder: 18409:18410 ioctl c0306201 20000540 returned -14 [ 1622.107046][T18420] binder: 18418:18420 ioctl c0306201 20000540 returned -14 21:46:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x743000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x84]}, 0x45c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000b00)={0xffffffff, 0xa, 0x4, 0x0, 0x1, {r5, r6/1000+60000}, {0x3, 0x8, 0xf7, 0xfd, 0x5, 0x5, "694ebbf2"}, 0x2e25, 0x3, @fd=r8, 0xba37, 0x0, r1}) pipe(&(0x7f0000000500)) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0xfffffffffffffdea) read(r1, &(0x7f0000000540)=""/168, 0xa8) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000600)=ANY=[@ANYBLOB="140401003c8473c2bb1aa2c964a65fe1", @ANYRES16=r9, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1622.330759][T18429] binder: 18428:18429 ioctl c0306201 20000540 returned -14 21:46:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x790000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1622.498236][T18436] binder: 18435:18436 ioctl c0306201 20000540 returned -14 21:46:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xa07300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1622.696312][T18440] binder: 18439:18440 ioctl c0306201 20000540 returned -14 21:46:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xb05300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1622.890202][T18444] binder: 18442:18444 ioctl c0306201 20000540 returned -14 21:46:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="010000289da8f015a2702e0ef88918147455368baa023df4cb09d3dbb420c1161da1c70262932a0356655b073804c06215e57808144a62196e14d04742cb017fbc665594aee01fe21dc2fc2f04b208d38d956540630ad0e6e6e272766bc4806f61ecea537a5dfbfbba847b330238c1a53ba06a2d0dc90ac44f63c50bbb74b78b1a8685d927a59f936d7c84eb1db34bfb7897a5a3162b17ec346dff80ba", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000100001000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x4c850}, 0x0) 21:46:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xb90000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1623.089355][T18447] binder: 18446:18447 ioctl c0306201 20000540 returned -14 21:46:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x1000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=r3, @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000600)=ANY=[], @ANYRESHEX, @ANYRESHEX=r4]], 0x3}}, 0x0) [ 1623.271264][T18454] binder: 18453:18454 ioctl c0306201 20000540 returned -14 21:46:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x1673000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x18, r5, 0xf07, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a8, r5, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c045) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:40 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={0x0, 0x62, &(0x7f0000000000)=""/98}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000140)={0x2, 0xa, 0x4, 0x2, 0x80, {}, {0x5, 0x2, 0x1, 0x40, 0x1, 0xf9, "7c6cf2dc"}, 0x1, 0x3, @planes=&(0x7f0000000100)={0x9, 0x8, @userptr=0x7, 0x7}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f00000005c0)={0x3, 0x0, 0x17, 0x17, 0x14c, &(0x7f00000001c0)}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x18, 0x140c, 0x8, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4008050) syz_open_dev$rtc(&(0x7f0000000740)='/dev/rtc#\x00', 0x3, 0x88001) write$nbd(r3, &(0x7f0000000600)={0x67446698, 0x1, 0x4, 0x3, 0x2, "30596de1aa7a8c5fb87e4871d93828b1fa60e7050c1bd2e5ac85410112e056f62c"}, 0x31) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1623.494718][T18463] binder: 18462:18463 ioctl c0306201 20000540 returned -14 21:46:41 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x100, 0x1, 0x4, 0x1000000, 0x80, {r2, r3/1000+60000}, {0x4, 0x0, 0x0, 0x8, 0x4, 0x81, "26c3e44a"}, 0x40, 0x2, @planes=&(0x7f0000000040)={0x0, 0x6, @userptr=0x9, 0x3}, 0x4, 0x0, 0xffffffffffffffff}) ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000000140)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x1695000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r3, 0x800443d3, &(0x7f0000000040)={@any, 0x5000, 0x1, 0x31}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'trusted.', '\x00'}) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="98fefffd", @ANYRES16=r4, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0xc1475851cc56fe96, 0x3, {0x7, 0x1f, 0xb0, 0x1000400, 0x8, 0x9, 0x3, 0x800}}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x3}, 0x1) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$peekuser(0x3, r2, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x2000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1623.727049][T18479] binder: 18478:18479 ioctl c0306201 20000540 returned -14 [ 1623.894165][T18492] binder: 18491:18492 ioctl c0306201 20000540 returned -14 21:46:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:46:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x3000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:42 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003500)='/dev/vsock\x00', 0x80000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64, @ANYPTR64, @ANYPTR, @ANYRESOCT=r5, @ANYPTR], @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRES64], @ANYRES16=r3, @ANYRESHEX, @ANYRESOCT=r2, @ANYRES16, @ANYRESHEX, @ANYRES32=0x0, @ANYRESHEX], @ANYRESDEC, @ANYRESDEC], @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x5}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000003600)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000035c0)={&(0x7f0000003580)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x40040) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x401}, @window={0x3, 0x3, 0x5}, @sack_perm, @mss={0x2, 0x7fff}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x7) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="4a0e0000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:42 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000090000000000000010000000000a"], 0x28}}, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x42000) [ 1624.694292][T18504] binder: 18502:18504 ioctl c0306201 20000540 returned -14 21:46:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x5000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1624.919917][T18524] binder: 18523:18524 ioctl c0306201 20000540 returned -14 21:46:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x420000, 0x0) write$9p(r2, &(0x7f00000000c0)="23b7ee4acebf6eacdc73a33b2bbc14b3d2a50096496d801f168f523c34cc8b4bededb483e22e149a0c153453d21a3b3ae0ae5315ef0340d13a37219e7d05f1568f03ec66df3b3f26faaba4babf182d52e54374d656443b84cceb3cfc220692615ef103db85ba83ab5a78dd8033e545cb29a353bd4cc951d0cff95356735bb7f45a113bfad4c2621433d3efe8ee1daed77d73a26d361291ae7e85bb845a4dde7d45f53d6216fb23d8ca4dafdb828142578e32ae6f73bead662f64146e57dc45b9d4068eeb2e68694a424789dcc7a50792e5", 0xd1) 21:46:42 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00'}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x7, 0x7fff, 0xff, 0x3}, 0x4, [0x7fffffff, 0x100, 0x7, 0xc0b, 0x3, 0x10001, 0x20, 0x1, 0x1, 0x3, 0xe2, 0xfffffffa, 0x4faf, 0xca59, 0x0, 0x2, 0x5, 0x2, 0xeb6, 0x1, 0x480, 0x1, 0x1, 0x7ff, 0x0, 0x1f, 0xa0e5, 0x5, 0xffffffff, 0xfffffffa, 0x134faaab, 0x7ff, 0x0, 0x9, 0x5, 0x67, 0x0, 0x80, 0x7ff, 0x0, 0x4, 0x1ff, 0xa274, 0x7, 0xbf2, 0x6, 0x4, 0xfffff027, 0x1, 0x8, 0x3f, 0x1, 0x800, 0x101, 0x4, 0x1f, 0x7, 0x3f, 0x3ff, 0x10000, 0x7, 0x0, 0x5, 0xffffffe0], [0x1ff, 0x9, 0x8, 0x4, 0xffffffff, 0x40, 0x6280, 0x401, 0x400, 0x8321, 0x5, 0x3, 0x1f, 0x7, 0x6013, 0x85, 0x5386, 0x0, 0x200, 0x80000000, 0x80000000, 0x0, 0xeee6, 0x6, 0x30a53f97, 0xf6, 0x6afb, 0x1, 0x2, 0x6, 0x8000, 0x8001, 0x1, 0x4, 0x9, 0x1, 0x2, 0x9, 0x20, 0x6, 0x5, 0xd1, 0x2, 0x7fff, 0x3, 0x4, 0x440, 0x800, 0xffffffff, 0xdf, 0x6, 0x2, 0x5dba, 0x3af, 0x0, 0x8, 0x0, 0x100, 0xec2, 0x2, 0x3, 0x7fff, 0xab, 0x8], [0x7f, 0x4, 0x20f, 0x0, 0x3, 0x5, 0xffff, 0x7, 0x1, 0x9, 0x9, 0xfffffff7, 0x7, 0x100, 0x60, 0x3, 0x1000, 0x1, 0x80, 0x7, 0x8, 0x1000, 0x200, 0x1, 0x4, 0x31, 0x20, 0xae32, 0x2, 0x0, 0x3, 0x7, 0x4, 0x0, 0xffff, 0x0, 0x7fffffff, 0x80, 0x0, 0x8001, 0x6, 0x5939, 0x5, 0xfff, 0xffffff35, 0x3f, 0x424d, 0x8, 0x7, 0x0, 0x8, 0x9, 0x7, 0xffffff01, 0x821e, 0x1f, 0x1, 0xfffffffc, 0x1000, 0x2, 0x0, 0x10001, 0x80000000, 0x10000], [0x1000, 0xffffffff, 0x6, 0x3, 0x4, 0x0, 0x6, 0x401, 0x5, 0x0, 0x1f, 0x25fabe00, 0x81, 0x9, 0xfc5, 0xffffff80, 0x6, 0x1f, 0x9, 0x9, 0xfffffffe, 0xfffffffd, 0xc3ca, 0x6, 0x1, 0x5, 0xfffffff8, 0xffffffff, 0x5b, 0x100, 0x9, 0x2, 0x3, 0x1ff, 0x0, 0x1ff, 0x1ff, 0x280, 0xfffffff9, 0x2, 0xff, 0x81, 0x2, 0x4, 0x5, 0x3ff, 0x9, 0x7ff, 0x0, 0x6, 0xb9, 0x9, 0x9db, 0x8, 0x3, 0x8, 0x2, 0x3, 0x1, 0x100, 0x7, 0x800, 0xa0000000, 0x9]}, 0x45c) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0907e2ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000001c0), 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="090000003273caa60e6f4594b25538295ddbf26e6f277effff8d75f6581ac0c94dd1f42aa6b1702b2f1710ffa7a05da3d138ef020a24b43a9207aec918ab189db153478c437ab4f88ab898f7636dd8423b8ca63c", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r5, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180)=0x1f2, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) [ 1625.088593][T18527] binder: 18526:18527 ioctl c0306201 20000540 returned -14 21:46:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKRRPART(r1, 0x125f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1625.312035][T18534] binder: 18532:18534 ioctl c0306201 20000540 returned -14 21:46:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:42 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000200)=0xe8) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="e864d5131051a3b3f73581dd7b156e8967460001fbe4bafded3036543b83e779c7a867990979e975a9081bb7c4ddcff671f7431ddb765eed", 0x38}], 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0a0101f4abd95cd99f0009000000000000000100873eb675efef39c30000140000000000d300000024288df3000002d01e00000100c1dad4a5da1b00000004000008000000000000"], 0x1c0}, 0x20008840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000240)=0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r7, 0x400000001ffffffd) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r8, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x2bc, 0x1, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFQA_CT={0x7c, 0xb, 0x0, 0x1, [@CTA_NAT_SRC={0x1c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x5, 0x58, 0x4]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfff}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x80000000]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_MARK={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x81}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x400}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_EXP={0x198, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff8001}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @CTA_EXPECT_NAT={0x140, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_CT={0x1c, 0xb, 0x0, 0x1, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x38}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xc9}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x100}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x4880}, 0x40) ioctl$USBDEVFS_RELEASEINTERFACE(r6, 0x80045510, &(0x7f0000000440)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1625.506269][T18541] binder: 18539:18541 ioctl c0306201 20000540 returned -14 21:46:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x320) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0xf, 0xff, 0x4c, &(0x7f00000000c0)="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"}) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x8000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) socket$inet6_mptcp(0xa, 0x1, 0x106) [ 1625.776670][T18556] binder: 18554:18556 ioctl c0306201 20000540 returned -14 21:46:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x20000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:43 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8200, 0x0) write$apparmor_exec(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="737461636b2040706f7369781fb65f61636c5f6163636573"], 0x18) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1625.989758][T18568] binder: 18566:18568 ioctl c0306201 20000540 returned -14 21:46:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x3f000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:43 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 1626.174372][T18574] binder: 18573:18574 ioctl c0306201 20000540 returned -14 [ 1626.243194][T18579] sctp: [Deprecated]: syz-executor.5 (pid 18579) Use of int in maxseg socket option. [ 1626.243194][T18579] Use struct sctp_assoc_value instead 21:46:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000191000010000000000000400000000000a"], 0x28}}, 0x0) 21:46:44 executing program 2: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x404100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 0x80000001, "4b41ab1321b2e6a65d0793d9e413f53a830cb8eb023e0679ef143d81c6062c481044efc6cdca927807729ef0414d05018236"}, 0x20c500) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x48000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:44 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = accept4(r2, &(0x7f0000000000)=@xdp, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0xb89) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1626.905353][T18586] binder: 18585:18586 ioctl c0306201 20000540 returned -14 21:46:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x4c000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1627.116521][T18598] binder: 18595:18598 ioctl c0306201 20000540 returned -14 21:46:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x60000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1627.324210][T18602] binder: 18600:18602 ioctl c0306201 20000540 returned -14 21:46:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x68000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1627.483760][T18605] binder: 18604:18605 ioctl c0306201 20000540 returned -14 21:46:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x6c000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1627.657418][T18608] binder: 18607:18608 ioctl c0306201 20000540 returned -14 21:46:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x74000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1627.965299][T18614] binder: 18613:18614 ioctl c0306201 20000540 returned -14 21:46:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x7a000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3fffc0000000, 0x402000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700ffffffffffffffff", @ANYRES32=r6, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x620, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1628.140904][T18618] binder: 18616:18618 ioctl c0306201 20000540 returned -14 21:46:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000000)) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xff000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:45 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1f) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1628.385410][T18626] binder: 18625:18626 ioctl c0306201 20000540 returned -14 21:46:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000240)={0x5, 0x5, 0xfff, 0x9, 0x2, 0x2}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r3, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040)) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="d7fbb9a6da8f1d917137911098685d9d1066d0ff76e3e7fc519cefa96c4d3f7f961f134183d86976731a2b10695d934421e2fc0514630b69b77cb7665431abd95a1c656ee9f2ca8f62045d619c8033e77ec65030f9988d9f9bf367eb857624bf419913d35a84bb0802356a3cfc36909b96e07d35b4287fc94f0cd067c3fff6d837e2b8ec9b678999f0babfbdb98c981171f886a0629c9610b36cd77cd5426a17d9e1b138f378e9637317c5c81cfbb6d73187ca88052589e6f130a76154b8880668652bef3f24d19a03df6203ffc8214e") prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xff600000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1628.632420][T18637] binder: 18634:18637 ioctl c0306201 20000540 returned -14 21:46:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0xffffffff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) prctl$PR_GET_CHILD_SUBREAPER(0x25) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0x400, 0x6, &(0x7f0000000000)=[0x101, 0x6, 0x8000, 0x3, 0xfff, 0x7ff], &(0x7f0000000040)=[0x80], &(0x7f00000000c0)=[0x1, 0x0]}) [ 1628.883594][T18645] binder: 18644:18645 ioctl c0306201 20000540 returned -14 21:46:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x2}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:46 executing program 2: socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1629.195039][T18658] binder: 18657:18658 ioctl c0306201 20000540 returned -14 21:46:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x3}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:46 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) ptrace$setregs(0xf, r2, 0xfffffffffffff000, &(0x7f0000000000)="b0ef694a333f708b412899ecf80c12133f54d22db7b122eeb2b18829c15c04260902a8cbcaaf0dff6f5feed508a149d98c2334ca7441886171ca343ec3363c38b6d097437fb5dcd0c2e0b9d2a0e121300678bbfa336bba8d077408c69209e4ad46ca3fc943eabf25704747b23b237df041") [ 1629.367337][T18666] binder: 18663:18666 ioctl c0306201 20000540 returned -14 21:46:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000540)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f00000005c0)={0x401, 0x4aee99539b279929, 0x4, 0x10000, 0x81, {r5, r6/1000+60000}, {0x1, 0x1, 0x2, 0x1f, 0x8, 0xc3, "f5698572"}, 0x7fff, 0x1, @userptr=0xfff, 0x9, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_STEREO(r7, 0xc0045003, &(0x7f0000000640)) r8 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$AUDIT_DEL_RULE(r8, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x424, 0x3f4, 0x100, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0x36, [0x1, 0x1, 0x1, 0x1, 0xe0b0, 0x849, 0x0, 0x3, 0x7, 0x0, 0x4, 0xfff, 0x9, 0x7fff, 0x9, 0xee, 0x433, 0xfff, 0x0, 0xfff, 0x80000001, 0x2, 0xac, 0x7fff, 0x6, 0x4, 0x3, 0x7, 0xfd3, 0x8, 0xffff0000, 0xfffffff7, 0xa6e, 0xffffffff, 0xdb5, 0x3, 0xe82a, 0xff, 0xffffffff, 0x2, 0xf2, 0x8879, 0x80000001, 0x20, 0x9, 0x80, 0x7fff, 0x1, 0x3, 0x5, 0xce6, 0x5, 0x8, 0x4, 0x5, 0x7f, 0x7, 0x2, 0xc72, 0x3, 0x7, 0x7, 0x6], [0x80000001, 0x8, 0x9, 0x80000000, 0x80000000, 0x9, 0x8000, 0x4, 0x6, 0x4, 0x80000000, 0x0, 0x7, 0x643, 0xe0000000, 0x6f7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3f, 0xfffffeff, 0xcc9, 0x480000, 0x1, 0x1, 0x3, 0x7, 0x4, 0x4, 0x4, 0x200000, 0x9, 0x2, 0x6, 0xa0f, 0x87a, 0x33, 0x3, 0x5, 0x3, 0xaa5, 0x60, 0x9, 0x10001, 0xfffff001, 0x1000, 0x9, 0x0, 0x1, 0x399, 0x40, 0x1ff, 0x1ff, 0x8, 0x3, 0x9, 0x1f, 0x29, 0x20, 0x200, 0x4], [0x1f, 0x6, 0x8, 0x7fff, 0x4, 0x0, 0x0, 0x800, 0x0, 0x3ff, 0x3, 0x9, 0x4, 0x6ff, 0xffffffc0, 0x7, 0x2, 0x9, 0x5, 0xe98, 0x7fffffff, 0xfff, 0x2, 0x9, 0x0, 0x101, 0x7d1, 0xfff, 0x65, 0x10001, 0x9, 0x1, 0x2, 0xc0cf, 0xffffffe2, 0x81, 0x200, 0x40f, 0x5, 0x0, 0x2, 0x6, 0x4, 0x94c3, 0x3f, 0x7, 0x9, 0xfffffff9, 0x1000, 0x8, 0x4, 0xffffff01, 0x8, 0x7, 0x54, 0x10001, 0x8, 0x4, 0x6, 0x6, 0x400, 0x4, 0x7ff, 0xffff3da9], [0x7ff, 0xea0, 0x10000, 0x4, 0xfffffffd, 0x2, 0x6, 0x3, 0x80000000, 0xfffffffa, 0x10001, 0x200, 0xff, 0x1, 0x80000000, 0x6, 0x10000, 0x8000, 0x0, 0x7, 0x0, 0x3000000, 0xfbbf, 0x1, 0x7, 0xdee, 0x3, 0x400, 0x8, 0x4, 0xc0000, 0x401, 0x6, 0xab4f, 0x9c6, 0x3, 0x1, 0x9, 0xd2f, 0x6, 0x7ddabe2a, 0x491, 0x7fff, 0x2, 0xefa3, 0x26, 0x5, 0x8001, 0x5, 0x0, 0x8, 0x42, 0x0, 0x7e, 0x5, 0xfff, 0x7fff, 0x3f0c, 0x2, 0x8, 0x9, 0xfff, 0x8, 0xf5fc], 0x1, ['\x00']}, ["", "", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4000}, 0x40) [ 1629.588354][T18673] binder: 18672:18673 ioctl c0306201 20000540 returned -14 21:46:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x5}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1629.820453][T18681] binder: 18680:18681 ioctl c0306201 20000540 returned -14 [ 1629.981045][T18684] binder: 18683:18684 ioctl c0306201 20000540 returned -14 21:46:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1630.189913][T18688] binder: 18686:18688 ioctl c0306201 20000540 returned -14 21:46:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x8}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1630.410555][T18691] binder: 18690:18691 ioctl c0306201 20000540 returned -14 21:46:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x48}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x18c, 0x15, 0x2, 0x70bd25, 0x25dfdbfc, {0xb, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "2b59f958e0357bd94a1423a960d346265d2ffe196f2cd02175d965c8713d5201d34bbe8a2a1d606ab244b905af3fb5a06732cc06e7e80fcf1c72c3a3a02d2a3b58c48366ba9ba9029db337b5eb6df7b578eca2f6aeb73fbed947cb600255f2c2e80778b2297ca69195063e99ef52b5eb7035ea3eb3694ce419f889fdd39a11ed41c61659af7b96efef381186a37f5fde0a34b2e05920abcf2ecc8d75535a812ab902b7363844c3951711646b793d5e7e43003aeb4954b7d540ccd319be857988886066a46c437ce2af3eb74bfad29975064dede8714eec5fb4476160e3fbcc3b"}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "01a9fe4b20f7f6655a7dc8873281097ef1b61a6fe9c6da67f479472f7aedc2c2f38631da88b26382e6f7c59011c6dd534e5d4777ede77b5d90ea2fd5e6b5d49a9d68aeb48a83eeef48fb3160ef9da3cb11fcffd23854316f3d31a5c2e996c7f1b38e19a6e493d3331b3b7e03da6de002ca1dec63de313ab6896e0824d5e3"}, @INET_DIAG_REQ_BYTECODE={0xf, 0x1, "f0d3e8fef7cb46626d5826"}]}, 0x18c}, 0x1, 0x0, 0x0, 0x48010}, 0x40000) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1630.638248][T18699] binder: 18698:18699 ioctl c0306201 20000540 returned -14 21:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000000)=[0x0, 0x0]}) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4c}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1630.899483][T18709] binder: 18708:18709 ioctl c0306201 20000540 returned -14 21:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket$inet6_sctp(0xa, 0x8, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={r5, 0xfff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000006c0)="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", 0x1ac) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={r6, 0x28, 0x3f, 0x8}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0xfffff800, 0x8, 0x2, 0x4, 0x3}, &(0x7f0000000380)=0x98) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x60}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1631.116814][T18715] binder: 18712:18715 ioctl c0306201 20000540 returned -14 21:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x9) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x68}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$snddsp(r4, &(0x7f00000000c0)="3c4439f806d2ae07d7213957988ea667bcead9dff03db86c0840c9c0081c95a2fb2b36ddaace7e086edb843118d5f039192fcb62f427fe4c705a02bd5382baee4d1424c7a78b8f6c9ff6ffac37b8a419b562236443c4de79ccc1c9c63d70d92c2f437db29fe217c5ab50b312205a04bb21a9c19b99b017ed9fe9169d08b116e33b3f971a37a997980b6646558cb2b3f21aad731f9caecb0e812d0164c45823a68816665054334e1ba7aeb28cda8d4fb457844a26e37b0206fe1a001a8f92a1eaf6a2694b2d1c72d003bd989fdeef92cf78d39e24c9f463977787b0961cb9", 0xde) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1631.364003][T18729] binder: 18728:18729 ioctl c0306201 20000540 returned -14 21:46:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6c}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) fcntl$setflags(r1, 0x2, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1631.591797][T18739] binder: 18738:18739 ioctl c0306201 20000540 returned -14 21:46:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x74}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000000d063372359431bca27c00000a0000080c000300686173683a697000b3a4cefddd884ac80d5ec62776b3aa0eb06db70f2d3ba78ba6224a3d5ed09b492ddbe5eac6bbc26601a0dcf5217aabe64b5124"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1631.809974][T18746] binder: 18745:18746 ioctl c0306201 20000540 returned -14 21:46:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) 21:46:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7a}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4041, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x101000, 0x0) r4 = signalfd(r2, &(0x7f0000000280)={[0x27]}, 0x8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)={0x1, 0x8, 0x4, 0x2000000, 0x5, {}, {0x3, 0x1, 0x7f, 0xff, 0x4, 0x3, "252ad935"}, 0xe3, 0x2, @userptr=0x5, 0x3f7, 0x0, r4}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000000408030000000000000000000a0000000900010073797a31000000000900010073797a30206fea79"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000840) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x81) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000000c0)={{0x32, 0x1}, {0x6, 0x5}, 0x0, 0x1, 0x7}) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1632.043428][T18760] binder: 18756:18760 ioctl c0306201 20000540 returned -14 21:46:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:49 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x3, 'erspan0\x00', {0xff}, 0xfe}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8003}, 0x10) write(r0, &(0x7f00000000c0)="1b0000001e005f0214fffffffffffff80700000002000000000000", 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="ad95786d600cb08192ef5834b64cb65a4a7c5b7c3abe8072d4b83e354ac3f5", 0x1f}, {&(0x7f0000000100)="b6cd568cf46263297bfe2e3300cd23f40ae92decd03c11542c7bdc9ac2d0886b277050fef678c61f0e6ffc903449c769e64f814a2655a958ff5c2433f6baabe5dc25dc4443d0535b2b2d4fd3353f5d9d197aef3f262051a811c813644aef08605253b9ee571361d92ded10de592654bb2f552a5f05c7a5c1", 0x78}], 0x2, 0x498a) [ 1632.281550][T18767] binder: 18766:18767 ioctl c0306201 20000540 returned -14 21:46:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x500}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:49 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x101) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x300, 0x70bd27, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4791eb74, @bearer=@l2={'eth', 0x3a, 'vcan0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1632.497006][T18774] binder: 18773:18774 ioctl c0306201 20000540 returned -14 21:46:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x600}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:50 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_GET_CHILD_SUBREAPER(0x25) [ 1632.697826][T18783] binder: 18781:18783 ioctl c0306201 20000540 returned -14 21:46:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x700}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:50 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) 21:46:50 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) [ 1632.916589][T18790] binder: 18788:18790 ioctl c0306201 20000540 returned -14 21:46:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x2000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:50 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r0) [ 1633.133546][T18798] binder: 18796:18798 ioctl c0306201 20000540 returned -14 21:46:50 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) 21:46:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x3f00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:50 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_getoverrun(0x0) [ 1633.347545][T18805] binder: 18804:18805 ioctl c0306201 20000540 returned -14 21:46:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:51 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_getoverrun(0x0) 21:46:51 executing program 2: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) timer_getoverrun(0x0) [ 1633.563956][T18811] binder: 18810:18811 ioctl c0306201 20000540 returned -14 21:46:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4800}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:51 executing program 2: timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_getoverrun(r0) 21:46:51 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_getoverrun(r0) [ 1633.802690][T18821] binder: 18819:18821 ioctl c0306201 20000540 returned -14 21:46:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4c00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:51 executing program 2: timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) [ 1633.994653][T18829] binder: 18828:18829 ioctl c0306201 20000540 returned -14 21:46:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:51 executing program 2: timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) 21:46:51 executing program 2: timer_create(0x0, 0x0, 0x0) timer_getoverrun(0x0) [ 1634.195396][T18837] binder: 18834:18837 ioctl c0306201 20000540 returned -14 21:46:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x60ff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:51 executing program 2: timer_create(0x0, 0x0, &(0x7f0000000040)) timer_getoverrun(0x0) 21:46:51 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x40, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x40000, 0x0) [ 1634.397383][T18847] binder: 18843:18847 ioctl c0306201 20000540 returned -14 21:46:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6800}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:52 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x40, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x40000, 0x0) [ 1634.581453][T18853] binder: 18852:18853 ioctl c0306201 20000540 returned -14 21:46:52 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x40, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x78) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TIOCMGET(r1, 0x5415, &(0x7f00000000c0)) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000080)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x40000, 0x0) 21:46:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6c00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:52 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x0) semop(r5, &(0x7f0000000340), 0x21) semtimedop(r5, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048811) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r2) keyctl$negate(0xd, r0, 0x9, r2) [ 1634.825027][T18862] binder: 18861:18862 ioctl c0306201 20000540 returned -14 21:46:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7400}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x50, r2, 0x10000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x75}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x208202, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f00000003c0)={0x1, 0x0, [{}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x44, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4f7aa18a}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x356ba638}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x16822173}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20846042}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c803}, 0x80) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x18000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0x7, 0x0, [0x1b, 0x1f, 0x5]}, {0x5, 0x0, [0x0]}, {0x6, 0x0, [0x10, 0x14]}, {0xa, 0x0, [0x10, 0x10, 0x6, 0xc, 0x1b, 0x1a]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048005}, 0x8881) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e9, &(0x7f00000002c0)) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x44}, 0x1, 0x0, 0x0, 0x10006095}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_hsr\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:fsadm_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x40014}, 0x20000000) [ 1635.059573][T18869] binder: 18868:18869 ioctl c0306201 20000540 returned -14 21:46:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7900}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:52 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r2) r3 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x4, 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f00000000c0)={0x4, 0x80000000, 0x20, 0x800, 0x0}) mkdir(&(0x7f0000000140)='./file0\x00', 0x1e) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x8, 0x1ff, 0x401, 0x10000, r7}) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x428b42, 0x0) ioctl$IMCTRLREQ(r8, 0x80044945, &(0x7f00000001c0)={0x4008, 0x398, 0x3ff, 0xfcc}) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x18080, 0x4) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000080)=0x4) 21:46:52 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) getrlimit(0x522991124eced695, &(0x7f0000000040)) [ 1635.246117][T18876] binder: 18875:18876 ioctl c0306201 20000540 returned -14 21:46:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7a00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:52 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x800, 0xa0, 0x0, 0x6, 0xb, 0x1, "7bbdab594ad3d211dee512b0b3f6b228441652cac9bb88b50a3621eb984be085552d057e08e6a8bfbf5cf8c0721f3f980342ea8edcf8598294a96cdc41b711b9", "7e23fa3b8a351e1b2e01c8310134e8ad76a975d71622178b2aa463c311a105ff0a2bae8e960641c26337f1874dc7342bcecf2271f223651a3aaffcb396200ddd", "e3c1a3f4ea2e82489bfd50ea409776cae6fe90b9cbe347f62e8102a0cd570414", [0x1, 0x743f]}) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000180)={r2, 0x0, r4}) 21:46:52 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20, 0x1000, @local}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0xa, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000240)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x80, &(0x7f0000000100)}}], 0x1, 0x2011) accept$phonet_pipe(r5, &(0x7f0000000140), &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x840) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 1635.433558][T18884] binder: 18883:18884 ioctl c0306201 20000540 returned -14 21:46:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) fcntl$addseals(r0, 0x409, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f00000000c0)={0x604af7a8d79c7bab, 0x6, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0908, 0x0, [], @value64=0x80000000}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) fgetxattr(r4, &(0x7f0000000200)=@random={'os2.', '$\x00'}, &(0x7f0000000240)=""/4096, 0x1000) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000140)={0x4, 0x1, @stop_pts=0x8}) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) bind$rxrpc(r2, &(0x7f00000001c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 21:46:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xb900}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:53 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x0) semop(r5, &(0x7f0000000340), 0x21) semtimedop(r5, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048811) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r2) keyctl$negate(0xd, r0, 0x9, r2) 21:46:53 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x80000001, 0x1, 0x6, 0x8000}) [ 1635.693414][T18902] binder: 18900:18902 ioctl c0306201 20000540 returned -14 21:46:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xff00}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1635.875032][T18917] binder: 18916:18917 ioctl c0306201 20000540 returned -14 21:46:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1ff}, [@NFULA_CFG_MODE={0xa, 0x2, {0xa9d, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c0}, 0x1) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, 0x4, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x123600d4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5904cc8a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x63e6514d}, @NFTA_HOOK_DEV={0x14, 0x3, 'caif0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x25008992}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_HOOK={0x38, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x644e1cbe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3305194b}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond0\x00'}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, 0x114}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 21:46:53 executing program 0: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x10000, 0x0) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x2, &(0x7f0000000140)={[0x7fffffff]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x300, 0x70bd27, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100027bd7000fbdbf083fe1c47a70e6814faefa9df2501000000000000000c410000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x3]}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x100) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x3}) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000600)={0x40, 0x8, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4001) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:53 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) mmap$perf(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x6) 21:46:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x306701}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:53 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100)=0x1000, 0x4) 21:46:53 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x8010, r1, 0x0) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1636.283218][T18929] binder: 18925:18929 ioctl c0306201 20000540 returned -14 21:46:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x307400}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:53 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) 21:46:53 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) recvmsg$can_raw(r0, &(0x7f0000001480)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/9, 0x9}, {&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/213, 0xd5}, {&(0x7f0000001280)=""/21, 0x15}, {&(0x7f00000012c0)=""/50, 0x32}], 0x6, &(0x7f0000001380)=""/225, 0xe1}, 0x40000101) [ 1636.504839][T18942] binder: 18940:18942 ioctl c0306201 20000540 returned -14 21:46:54 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x0) semop(r5, &(0x7f0000000340), 0x21) semtimedop(r5, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048811) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r2) keyctl$negate(0xd, r0, 0x9, r2) 21:46:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x400000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:54 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000040)=0x1f) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) [ 1636.738336][T18956] binder: 18954:18956 ioctl c0306201 20000540 returned -14 21:46:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r4, 0xc59a}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) 21:46:54 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:54 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8001]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x4787db29, 0x9, 0x4, 0x8, 0x9, {}, {0x4, 0xc, 0x4, 0xc, 0xff, 0x1, "7bf04eca"}, 0x6, 0x2, @userptr=0x1, 0x1000, 0x0, r0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @initdev}, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) 21:46:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x9, 0x42, 0x8, 0x8, 0x80, 0x7fff, 0x8001], 0x7, 0x0, r3, r4}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x506901}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:54 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x8de, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:46:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b5d509b000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000dd0038406c00"/108], 0x320) ioctl$KDSKBLED(r0, 0x4b65, 0x7fffffff) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa80, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$snddsp_status(&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x12, r3, 0x82000000) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20) shutdown(r1, 0x1) [ 1636.964926][T18971] binder: 18968:18971 ioctl c0306201 20000540 returned -14 21:46:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x53b000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010e2bb57000fddbdf250f00000008000b008100f3ff07000600", @ANYRES32=0x0, @ANYBLOB="08003400fcf7ffff05002f000100000008003a000400001c08002b0003c66a4076636786000000783e107a010000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x5c, r3, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008897) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000140)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2008881}, 0x800) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[]}}, 0x0) pipe2(&(0x7f0000000080), 0x0) [ 1637.183776][T18991] binder: 18989:18991 ioctl c0306201 20000540 returned -14 21:46:54 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x0) semop(r5, &(0x7f0000000340), 0x21) semtimedop(r5, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048811) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="e1b2837c244964b4af8bea12cca3fce1d0905739234ad89dafc67f167a52e0d4c399ee883faa60a3bd8393f1fc09432b350c262c8ee591e226c7f373225b4daaf01b85e0c2e4897e84327b9d63888ef33702a249b2bcd267a09c5038c7eea971581b8531894f1494404b898cb36b5c3e63b28d5a003d3c035bc25b9f70f6d9d8e448d5d93aca25496540f557a7b326b50dc182a31d45b31d0faa1a96a1e46616e51266c6d1f10c4fe947d15895cbdc82fdf6c4e631ea55370705089e457900af19aec0cfeb2a378b15825233c02ffd53fd16b8489a9f33efbf16430c1b846ac3ad70c45cd371538db1baefcee1b278e562845a730ec6ad52bdeb395ea821b16c54872aa3e07ccf62131edd9798869a8d469e67aa0a7526944d6e7223cd4b949ec5fc25c80cc13880324b26fa5566ce305d81be2d02400cf0b78920965be930e5c9c72e51f2478b7836930036c27d02497022954520c3fdc9daf0c868b6fe42f5973e8f05c687746c9801d7ccde38962db28006ba477b10222b67b9585b99caf1f27baa399d6f27a2e50789ad5eea8444a926057cf2e05e81781510cc369b58da5f9bc834ef0e5c5e54aa8f030370c51be1195e99dbd855124879f40d66f02f008e29f9021537cc97a64eb6fd2812131625bcb0b01a31b39fde1ab5a4df02dd53811fc542474a7c600c3e2eb58a61416b3f3f86e414adf3839ef7e7c8323aa42f7b2c2496b43121ea520a678d692881a7b602bc785a08b04467d930f10e0dafa8cedfb5f3a04a9a3d978b1628591da0377f4c93ff4c57e05b699ab7336661de1bae9011cf8338c9ad244d1c4d32bdc4a0f78dd0da1f2efd8bf89d399a2fd1d1e3fcf39fba8f8577ac54c403950bb3df1385ee78b3509e2523321818511fbe0d59c7a0094665a71fcda5be59b6629ec4fffd18a8391e2f524d69d97bac09ac9475602e07c8607b5ee2b3f3b37355c58f90dc01e57af1c275fcfaa4e256f1ade21d37664be8e9f06c955ed105a879c32e93b21b84fa3f523a275a02ee26f301ebf85efb96eb7a407b18dfd4715d5706b8ea1503c3e287fa678b0a27d4cf99f078277da50558d520fcddcb70507c930ebca2253f1255800a6929ef5ba8ac0769d79b5576d1a7a29193c5c6b90cf0200c60adbf87284f92d43a5a54db9731adc4e04ea743a96770a0e49115586899e6de47419f08041f96308b87995eabc56ee32919282130b056ee9110a9d535d120c95e1881639da92fb519c41bc6e8d0e0a052a40faab78475891f576e59136eb7edef6bdb86cd0c877198d657c654b4a092838ec62b699a80aaa788e169103d290bf60598f574288b5d4438d37c5c697198ba26ce6c06ab01652e0efdd171c08f88db949e3d209363f91398fc182a604143b4210e5d54216a66f4202fe3af4d117846941e637788cbd8c1f32eefa0a8f8b0e01786dd38b3f0e358bb359a2ad8405e0c5940dc3fe1302b324556bf7db66cc30e4acc1f41288d4da21078a658d1be1a80fc580527ecd9563072df7c5eecf3fe5fe1cc84c96f990f35479882912293ef2f1f8d2e27bd1563238389fc209ad38b0ec26ec39eb951b81ade9200ec14edf08ae01ce59a8bb90733f8e9dac644ded0722df837563df4c9f3b14f31ef41ee80d7d1f1a3a904db55e488f1268d79d096089dfcec555144511fbd247314877264337a1b970688c87d35a0261a043f0efbeff2f837af03ad020a99fcd611671d51ab3f15461f574a268861271623907f9de2a235a784853a82c6b95656cf8dff0543b139b7967350bcb45ef9aa8fb9f9a6eda6c2262cd70429bb75e7e163f56d8841bc186b57297566df536018f01c85237c43bf8cc428d29dc091165b67f77a9b56c166501a817ac774fc1266cd4cd2a913def8eff0a22c546e104751d9b6f2abe874e48f66516a019a406e6d522a120c16adc59387fdde1141eff3d979b4a9902d340280191fc3bbe10a393badf37ec48ce056ee8d3d1c4cccf9b2f6cae7503f7d32b42087e9122f24478de7639d06cecf7f159b0a1aa4c0e7f9e05abf735817d8a8a6000cec82d0d9b91ccf38836a9c7d5b9c4c485d77598edf755cec25096d14715695e1deb8c7c72660e5a7f2076ff6bbe9cdca94e06a7ef7bb3a84db7e6f08bd2803b30bf7d3591d7fab0a6f1f83930adda351161df84595c809e8b9c5f0ab859c374eb73548628ef1434bd58d27ae0f281f17588ea475dd24d2d980a560b81a81e01f2821e535bda941bca83a2ebd651fbb7284e86fe7a4e0c2b3dec4193d32426f78bc7bed489d00e7f9d267d2c36e511d425734c3bdd0da994593891f6557890475b729115697ae7190e677b8dbf95444a8a66c65cc59b1910c6b0efec1e4e67eda66934dbfac7510e2bee5af2149b67e9021f94776bcca1e09f78c35ed5cae3c591f7ec74470f601f593fe67da466c45b95da49cae6bb908e32673f57c9a4137d70164ab5278b93ca0cbf57b9a0ca8add3d5a8ac7816574f269573df41e75e92d1a6eac4f26f1d48b45571870d04aa7e54f85c17917d9194337dd352feafa1e32c1a9453986bb0cc48f7b4b4e2a3bd4b3afcba40e15e6403ab69263966c4564877627f17059cf44862591d8803edc106665aabe89e8c1378cebbae7de0f61cb62fc3409ccde14f6f7cad84b2c000586e477ce53763307e64dd665aa88edcdaa946b7bd14161de9cbb6cab6066225e44e2d4755e9a26df316680a82cd7a414a6ec6236ee162dec07edddf1421ddb9d4d72006bb025d06fe4fc7d469ce2406d91dcffa229387e52a1c481c03a3e2b3f0363a3731bfb7374a6fb59e232c9bdcc785657d1986a7e7a666fb61ea00d6d388ce75f44e31a4046e8424f00a72ae4e2d2f97e504ccf305fdbbec2d63425f5682", 0x801, r2) 21:46:54 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) sendmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="dcb6f18b", @ANYRES32=0x0], &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0x200, @empty, 0x26}}, 0x1000, 0xe7, 0x20, 0x9, 0x80, 0x8, 0x5}, &(0x7f0000000300)=0x9c) r4 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r4, 0x0, 0x202, 0x0, 0x0, 0x10000007c) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, 0x0, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) setgroups(0x1, &(0x7f0000000080)=[r6]) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r8, 0x9}, 0x8) 21:46:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x73a000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1637.538247][T19010] binder: 19004:19010 ioctl c0306201 20000540 returned -14 21:46:55 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000080)={0x6f2b7662, 0xfffffffa, 0x8, 0x6, 0x3, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="141300001000010000000000f3ff14000000000a140000001000010000000000000000000000000a62cc554c0e7de6aaed10852d6415864d1c0b3761b6c871769f7fc5abed2d2ca82eba32221eb8e3c39a7d955d3bfb6ba81c81b8deba603bf238dda70dde12db119a30b08b469994609a3cccff9fca668a71450de0902fe05b4e671288a6528cd903ef213d0c8ebb00001946e730e397e3156bd983baea99902c0906f771a4bde0489fc4268a463e1befed6fcd56143564922fe70cdad50ae5d9de43d1f0d4ea33cf3fe87082585cead4015d6375ac5e4ee5f0"], 0x1}}, 0x40011) 21:46:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x743000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:55 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) listen(r2, 0x1ffefffd) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0xe, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000490}, 0x800) 21:46:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000103010100000000000000000a00000420000b8008000c40000000000c001080080001407f0000000000000000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x840) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r1 = socket(0x2, 0x5, 0xfffffffc) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x8, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) 21:46:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="02f9ff00", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1637.980000][T19022] binder: 19020:19022 ioctl c0306201 20000540 returned -14 21:46:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x790000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xa02, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xfffffffffffffffd) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000100)={{0xff, 0xff}, 'port1\x00', 0x82, 0x54, 0x3, 0x1ff, 0x843, 0x20, 0x8, 0x0, 0x0, 0x7f}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000000000000fc1d247891356b379bb156e1d61fd00000000000000a1400efff0f000000000a00000000fe565958bf7d"], 0x28}}, 0x0) 21:46:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x0, 0x6, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x0, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x800}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x0, 0x1, 0x1, 0x0, 0x22eb}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x0, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_POSITION_ID={0x0, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0x0, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x69}, 0x1, 0x0, 0x0, 0x10001}, 0x0) 21:46:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xa07300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1638.151074][T19042] binder: 19040:19042 ioctl c0306201 20000540 returned -14 21:46:55 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x7, 0x0) semop(r4, &(0x7f0000000340), 0x21) semtimedop(r4, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048811) [ 1638.290227][T19053] binder: 19050:19053 ioctl c0306201 20000540 returned -14 21:46:55 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x12000, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000100)={[0x2, 0x0, 0x2000, 0x6000], 0xfff, 0x0, 0x1000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:46:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xb05300}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:55 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000440)={0x3, 0x0, 0xc, 0xa, 0xb9, &(0x7f0000000040)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000480)={0x28, 0x2, 0x0, {0x4, 0xef, 0x1000}}, 0x28) 21:46:55 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305, 0x3}], 0xe0, 0x0, &(0x7f0000000100)="e97c8e8de62c08225c40231d24e1b08f13c8cb20d09763ed6a7a69cac40b4c08be877ec3baceafe45bd549fa842e7671971db2e0838cfb851609d2a53735dcef8a2bf0955ce7120b782a928e85a436934f1d3cdd19a4e5901fbc9f4a76e4c359389858c3eb46245b839117b8a4e7933b529a0255efc0f2f63b94de748d06e8df54c58b576fb2ca8584c39a7616a7f80da4fd156bb75aad41bfbbf8e17c3bf9b2b27af58535d05a6ca885c82580cf82ff819766118c4c2fa045353bec15d98471dd37e65255d555382423c59f624b8c751fe0a6cd011b6e08aff4461083def346"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) [ 1638.461258][T19062] binder: 19061:19062 ioctl c0306201 20000540 returned -14 21:46:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000100000000000000000000000024"], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) connect$netlink(r2, &(0x7f0000000080)=@unspec, 0xc) 21:46:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xb90000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1638.818260][T19080] binder: 19079:19080 ioctl c0306201 20000540 returned -14 21:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:56 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000240)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ftruncate(r0, 0x3f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000040)={0x15, 0x110, 0xfa00, {r4, 0x20, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x118) 21:46:56 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000004c0)) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r4 = dup3(r2, r3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40001, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x0, 0x6, 0x4, 0x40000000, 0x6, {0x0, 0x2710}, {0x4, 0x8, 0x2, 0x2, 0x2, 0xd2, "adcf5457"}, 0x9, 0x4, @fd=r6, 0x3f, 0x0, r7}) 21:46:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) 21:46:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x1000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1638.997295][T19095] binder: 19091:19095 ioctl c0306201 20000540 returned -14 21:46:56 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x7, 0x0) semop(r4, &(0x7f0000000340), 0x21) semtimedop(r4, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) 21:46:56 executing program 1: mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b962dd0bfb"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8400}, 0x40914) 21:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="210700002200000000ff0f000000ed6f815717ad"], 0x14}}, 0x0) 21:46:56 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:46:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r2 = dup3(r0, r1, 0x80000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x300, 0x70bd27, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x80) 21:46:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x1673000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:56 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x40, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/190, 0xbe}], 0x1) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:46:56 executing program 1: umount2(&(0x7f0000000040)='./file0\x00', 0x1) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:46:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="0088e7f20e000d2d490da8c2d8ab82a14877b188fd61cc603e10cb82f684aacda3eb29f9e004ac785798f128bae061478ea19d3a1d519bba7dc89eb918a5f69c29e658a54f75ab6decf3ef4e97dbaade15ddcd9b0ac42b0effcb37fe6230fb3c34f24cf76cb4e853406591531e8d06618e583c28d0a4ed5733fcb8d8b8d3ec6e96c4284f92c31a3df95ba54f8b5bbf8cb7dc8099edb8fd7fe729bdfb3eae8dfd4fda89dfc89ac09a114aaf521a287c460288b881cb8afb513dfc1d33d32354f92e5b9e1bde6db1e0764368c19e", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x1695000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1639.306752][T19117] binder: 19112:19117 ioctl c0306201 20000540 returned -14 21:46:56 executing program 5: io_pgetevents(0x0, 0xbd, 0x8, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x989680}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010804d1e00000000000000000000000a140000001000010000000000ff0f000000000000"], 0x28}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "cd6f1e6605b7fdd1ab480de278fdbcf93ac429aa4f6364c368ac5149087c09d0251940a4601d4f12ac3bf17264121dae89787c97e1749280314d2bccb0df507762a165b3f461728c4d86f6930a5c8970d69281e04a9875873bcc4e0f3176ca874eb7aa1205bbab481c5b69ba2778bb886467f26ef371bcff604fa19fad9b5b70938bb6"}, 0x87) 21:46:56 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x200, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) sync_file_range(r2, 0x2, 0x7, 0x1) [ 1639.481948][T19141] binder: 19139:19141 ioctl c0306201 20000540 returned -14 21:46:57 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x0) semop(r3, &(0x7f0000000340), 0x21) semtimedop(r3, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:46:57 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0x8) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x80, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080), 0x2) 21:46:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x2000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001000000000000000000cc0a439710ddb4e6010000000000000000000000000a00005337c0a64cf8cf5560a7b5a4af84a1594b87060f864298ad2f74060357a7f7950dc9541aee7d087d1b88a5998310e7f94191ddda22df415994f5f71d590ead4d4a74d0f940dd102c7b3caccd183ccf932247a4d3c37e1f1aa1f86106c5081b04f399e2189bdd7b5f3066418199dd1c95fca7c485c795c7e0925af2fccdcebbcf1294a8c70256019a40c1e961288801752ca73f"], 0x28}}, 0x0) 21:46:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x81, 0x111000) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)="48bdb0a5ddfbb490d6a2feb4f1e480691420cfc159aefddfda7db7633c2b46ce049f1653cdd522ecc8783aa57da684ca4d73916a990c2fa2d2dc5398d8488889617d24dbcecbe9f39957489607f1babb2b220c88e1", 0x55}, 0x1, 0x0, 0x0, 0x4010}, 0x20000008) 21:46:57 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x12080) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x667) 21:46:57 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4f20, 0x0, @private1={0xfc, 0x1, [], 0x1}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x0, 0x11, 0x14, 0x1d2, &(0x7f00000001c0)="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"}) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) [ 1640.119044][T19163] binder: 19159:19163 ioctl c0306201 20000540 returned -14 21:46:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x3000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:57 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {0x0, 0xf79}}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r2, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_TUNER(r5, 0xc054561d, &(0x7f0000000040)={0x100, "f2e615f832b925dd3d85f9349a02fd15b2cc4f9e0f1cf057799c7bc1815fcfe5", 0x6, 0x8, 0x8, 0x2, 0x1, 0x2, 0x8001, 0xbf5}) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x989c]}, 0x45c) write$uinput_user_dev(r6, &(0x7f00000000c0)={'syz0\x00', {0x6, 0x8, 0xfe00, 0x7}, 0xa, [0x1, 0x1f8, 0x47, 0x4b5, 0x7, 0x9, 0x2, 0xcaf, 0x2, 0x864c, 0x0, 0x400000, 0x9, 0xfffff75e, 0x9, 0x1, 0x8c, 0x4, 0x7, 0x0, 0x20, 0x5, 0x664, 0x4, 0x81, 0xff, 0x1, 0x1, 0x400, 0x9, 0x5, 0x7ff, 0x6, 0x1f, 0x25fe, 0x1, 0x0, 0x80, 0x7, 0x7, 0x3ff, 0x2, 0x6, 0x9, 0x3, 0x0, 0x3, 0x8, 0x80000001, 0x4, 0x7f, 0x5, 0x5, 0x4, 0x8, 0x7fffffff, 0x4, 0x6, 0x9, 0x1, 0x1000, 0x80000001, 0x2, 0x1], [0x9, 0x1ff, 0x0, 0x6, 0x8, 0x2, 0x0, 0x3f, 0x10001, 0x9a8, 0x4000000, 0xdf, 0x1, 0x8, 0x1, 0x4, 0x2, 0x5, 0x7ca3, 0x6aa9, 0x1, 0x4, 0x0, 0x987, 0x4, 0x1, 0x2, 0x1ff, 0x2, 0x7, 0xff, 0x2, 0x6, 0x8000, 0x4878, 0x7, 0x1400000, 0x6, 0x8, 0xffffffff, 0xffffff40, 0xfffffff7, 0x7fff, 0x80, 0x4, 0x0, 0x8f, 0x80, 0x80000000, 0x3, 0x81, 0xfffffffa, 0x1000, 0x7, 0x5, 0x2, 0xfff, 0xd35e722, 0x1, 0x80000001, 0x4, 0x0, 0x800, 0x3], [0x5, 0x8f, 0x80, 0xfffffff8, 0x0, 0x0, 0x6, 0x1ffe0, 0x4800, 0x9, 0x9, 0x7f, 0x996, 0x7, 0x80, 0x4, 0x8, 0x0, 0x5, 0x7, 0x7, 0x3f, 0x9, 0x5, 0xc, 0x9, 0xe3, 0x80000001, 0x200, 0x1, 0x6, 0x59, 0x9, 0x7, 0x7, 0xfffffff7, 0x9, 0x9, 0x4, 0xf3, 0x7, 0x6, 0x8, 0x401, 0x1, 0x9, 0x8, 0x4, 0x6, 0x2, 0x8000, 0x8000, 0x9, 0x800, 0x2, 0xd860, 0x24, 0xa8cb, 0x9, 0x9, 0x2, 0x5, 0x1, 0x400], [0x7, 0x4b1, 0x1000, 0x80000001, 0x7, 0x5, 0x8, 0x3, 0x8, 0x5d06, 0xfffffcc2, 0x8, 0x9, 0xffffffff, 0x6, 0x0, 0x9e1, 0x7ff, 0x80, 0x4, 0xffff, 0xfffffffa, 0xfb3, 0x4, 0x8, 0x400, 0xffffffff, 0x290, 0x0, 0x4, 0xffffffff, 0x7f, 0x3, 0x2, 0x5, 0x3, 0x4, 0x6, 0xab0b, 0x0, 0x4, 0x1f, 0x9, 0x100, 0x9, 0x3, 0x40, 0x1, 0x3f, 0x0, 0x81, 0x9, 0x4, 0x2, 0x100, 0x0, 0x5, 0x3d, 0x6, 0x4, 0xcafe, 0x2, 0x6, 0x5]}, 0x45c) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000540)=""/168, 0xa8) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:57 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2003, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0x0) 21:46:57 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="84f897b6e205b3993e3fa6856ef4e2cbf0d105db246ae1eb33a92eb774cf7d3a47736529d59b17c3b46977c0b178fcdf401f61697f7b02dade42f668229f4eee33061fbc2436c06ad57adaf73304a824e50cfde31b16a50c067052b88c0bf775472cf156e00273ddfe155490f077c41099d94c9c51e902acf68085d250456b877185d5eceb01965dd948915c6d9f15efac192d50940ea01c5cbd07f3a4c308ecccc49a861d4c85ac90d46944eb7b6bfbb05884d1f18759f8adf2369d7b65aadb5419c517edbbcd581daa90e15bd076320b7d0ff26efde71cb4", 0xd9}, {&(0x7f0000000140)="6d029f7dd0ee259985f4f95627c1df3ce81481acdb274278fbff37e31fa84c0b67772fb7849bf89084c0279b2fc60304d04235312146632bce63cd03824f5a256c916941ef0f9b883649289b7026cb622ba52c23b64671e10234feb3863c44292f30a81cae4332ec05f2cce0c6de8696cd", 0x71}, {&(0x7f00000001c0)="32e04a65dbae62e91ab68653d358b29020c84d83b8b0678d39e26b135b20ecded69f3d35ed32f70e2ebb57dddd10a5dfd814fd48828fb2e742b946ef5718d974ea03cf650854bd11cd41f5eca7a3174ccb83cd72b1d429104c040ea315c444ff42b12bf8cae26541505de27494737143444a3d440c723a1f2947b30dd4caae034deac0ab8bec3c963951407bb2b0675a19047728193806e4658e67521ca4a63ef9f881279f4d2e63e7fc0c620b3343", 0xaf}], 0x3, &(0x7f00000002c0)=[{0x100, 0x11, 0x1, "f774802d40006c9d73328a78be92402c4b43eb999f5ea0be9d72be44e7df8a7e47a862cd45ef573a188468bbeb74870d231fb69d2c83e2c7212c6706e7c926943f657d8a87c9df73d494eb6eabfd658a211f64e4a7c9972c6a8f47a129c13bf547b523a26126a371ed999c9a37679ae0e3d95b33513cc912d104f6ac77a67b0955d9efe6fe3a7e7dc48469902a3821698fa5070c7a09c0f39cc8be938ba83929f04fc8fd58c867e88956e030809ebc9baf0d3a8b2b33080cfb3dc06357a5eed3ec59830b1d91e78f2d0f1f30a0ae1903533f51208822d7abac224a16decaaeae1ac7a0137347540b36ba5562a1"}, {0x88, 0x10e, 0x1, "24fabf375041f8dd762ef36973f8e13a77bd34f76ea4da52a150d44705185a59418aa8224f749bfdc276f717ae500ebc858e72afd350f880e62633bc6a89dd2f12db907ccab07022a5cb91c56ffbddc7591086ae34d48e0c6e1d01257f596433fc301a34af0236cd5750852b0bf5658f3792c9"}, {0xd8, 0x104, 0x1ff, "850ffd117ac31dcc46d0b87de8bbcfab3afef69d29312783709065306fb1ceeff4ef5539edc46f9ba1feb2d94912fb0c81a2e0e9c5a64b1f99f0e31913ecb218bb9beb102a6869f63ff24bef1eaf83cbe391385c201ad9691fe0f662eae79e701c2cb43b235887e0006a331757d3b7555231146b9640ba05df60caa166b01097cf5a24d3242f8b4981d8664b1c1ac5d56b4fba723ea7b804547496e77baa7c79a401a59dbf07b0a34695d7c4fa63ca264c641c90fb8ed66a47c369f40017256d9d27251f2b"}], 0x260}, 0x800) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) [ 1640.347080][T19184] binder: 19181:19184 ioctl c0306201 20000540 returned -14 21:46:57 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00000000c0)=0x4, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt(r1, 0x8aaf, 0x0, &(0x7f0000000100)="766d838832b73d579a58ae2ee1f4868c2f336d70674c13d98494e66ad80876a2668d61f14cf12c6fb274fb16f1dcfb1a7618634ce47d02ea9ff5bb032c", 0x3d) mq_timedsend(r3, &(0x7f0000000040)="de61e72fb071c2a783995cb2531532118cefe44d491ae1193c82ad680c0d3389b0a2fe377e02bd84747de18e3d8cd25d1aeb", 0x32, 0x512, &(0x7f0000000080)={0x77359400}) 21:46:58 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x0) semtimedop(r3, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:46:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:58 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) 21:46:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x1}}, 0x0) 21:46:58 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x2, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x71e5}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000845) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:46:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$setregs(0xd, r3, 0x7, &(0x7f0000000b00)="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") sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x3}}, 0x0) 21:46:58 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x20, &(0x7f0000000080)=0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) [ 1640.997974][T19216] binder: 19206:19216 ioctl c0306201 20000540 returned -14 21:46:58 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x0) semtimedop(r3, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:46:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x5000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r1 = dup3(0xffffffffffffffff, r0, 0x80000) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) r2 = socket$inet6(0xa, 0x40000080806, 0x0) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="e1b2837c244964b4af8bea12cca3fce1d0905739234ad89dafc67f167a52e0d4c399ee883faa60a3bd8393f1fc09432b350c262c8ee591e226c7f373225b4daaf01b85e0c2e4897e84327b9d63888ef33702a249b2bcd267a09c5038c7eea971581b8531894f1494404b898cb36b5c3e63b28d5a003d3c035bc25b9f70f6d9d8e448d5d93aca25496540f557a7b326b50dc182a31d45b31d0faa1a96a1e46616e51266c6d1f10c4fe947d15895cbdc82fdf6c4e631ea55370705089e457900af19aec0cfeb2a378b15825233c02ffd53fd16b8489a9f33efbf16430c1b846ac3ad70c45cd371538db1baefcee1b278e562845a730ec6ad52bdeb395ea821b16c54872aa3e07ccf62131edd9798869a8d469e67aa0a7526944d6e7223cd4b949ec5fc25c80cc13880324b26fa5566ce305d81be2d02400cf0b78920965be930e5c9c72e51f2478b7836930036c27d02497022954520c3fdc9daf0c868b6fe42f5973e8f05c687746c9801d7ccde38962db28006ba477b10222b67b9585b99caf1f27baa399d6f27a2e50789ad5eea8444a926057cf2e05e81781510cc369b58da5f9bc834ef0e5c5e54aa8f030370c51be1195e99dbd855124879f40d66f02f008e29f9021537cc97a64eb6fd2812131625bcb0b01a31b39fde1ab5a4df02dd53811fc542474a7c600c3e2eb58a61416b3f3f86e414adf3839ef7e7c8323aa42f7b2c2496b43121ea520a678d692881a7b602bc785a08b04467d930f10e0dafa8cedfb5f3a04a9a3d978b1628591da0377f4c93ff4c57e05b699ab7336661de1bae9011cf8338c9ad244d1c4d32bdc4a0f78dd0da1f2efd8bf89d399a2fd1d1e3fcf39fba8f8577ac54c403950bb3df1385ee78b3509e2523321818511fbe0d59c7a0094665a71fcda5be59b6629ec4fffd18a8391e2f524d69d97bac09ac9475602e07c8607b5ee2b3f3b37355c58f90dc01e57af1c275fcfaa4e256f1ade21d37664be8e9f06c955ed105a879c32e93b21b84fa3f523a275a02ee26f301ebf85efb96eb7a407b18dfd4715d5706b8ea1503c3e287fa678b0a27d4cf99f078277da50558d520fcddcb70507c930ebca2253f1255800a6929ef5ba8ac0769d79b5576d1a7a29193c5c6b90cf0200c60adbf87284f92d43a5a54db9731adc4e04ea743a96770a0e49115586899e6de47419f08041f96308b87995eabc56ee32919282130b056ee9110a9d535d120c95e1881639da92fb519c41bc6e8d0e0a052a40faab78475891f576e59136eb7edef6bdb86cd0c877198d657c654b4a092838ec62b699a80aaa788e169103d290bf60598f574288b5d4438d37c5c697198ba26ce6c06ab01652e0efdd171c08f88db949e3d209363f91398fc182a604143b4210e5d54216a66f4202fe3af4d117846941e637788cbd8c1f32eefa0a8f8b0e01786dd38b3f0e358bb359a2ad8405e0c5940dc3fe1302b324556bf7db66cc30e4acc1f41288d4da21078a658d1be1a80fc580527ecd9563072df7c5eecf3fe5fe1cc84c96f990f35479882912293ef2f1f8d2e27bd1563238389fc209ad38b0ec26ec39eb951b81ade9200ec14edf08ae01ce59a8bb90733f8e9dac644ded0722df837563df4c9f3b14f31ef41ee80d7d1f1a3a904db55e488f1268d79d096089dfcec555144511fbd247314877264337a1b970688c87d35a0261a043f0efbeff2f837af03ad020a99fcd611671d51ab3f15461f574a268861271623907f9de2a235a784853a82c6b95656cf8dff0543b139b7967350bcb45ef9aa8fb9f9a6eda6c2262cd70429bb75e7e163f56d8841bc186b57297566df536018f01c85237c43bf8cc428d29dc091165b67f77a9b56c166501a817ac774fc1266cd4cd2a913def8eff0a22c546e104751d9b6f2abe874e48f66516a019a406e6d522a120c16adc59387fdde1141eff3d979b4a9902d340280191fc3bbe10a393badf37ec48ce056ee8d3d1c4cccf9b2f6cae7503f7d32b42087e9122f24478de7639d06cecf7f159b0a1aa4c0e7f9e05abf735817d8a8a6000cec82d0d9b91ccf38836a9c7d5b9c4c485d77598edf755cec25096d14715695e1deb8c7c72660e5a7f2076ff6bbe9cdca94e06a7ef7bb3a84db7e6f08bd2803b30bf7d3591d7fab0a6f1f83930adda351161df84595c809e8b9c5f0ab859c374eb73548628ef1434bd58d27ae0f281f17588ea475dd24d2d980a560b81a81e01f2821e535bda941bca83a2ebd651fbb7284e86fe7a4e0c2b3dec4193d32426f78bc7bed489d00e7f9d267d2c36e511d425734c3bdd0da994593891f6557890475b729115697ae7190e677b8dbf95444a8a66c65cc59b1910c6b0efec1e4e67eda66934dbfac7510e2bee5af2149b67e9021f94776bcca1e09f78c35ed5cae3c591f7ec74470f601f593fe67da466c45b95da49cae6bb908e32673f57c9a4137d70164ab5278b93ca0cbf57b9a0ca8add3d5a8ac7816574f269573df41e75e92d1a6eac4f26f1d48b45571870d04aa7e54f85c17917d9194337dd352feafa1e32c1a9453986bb0cc48f7b4b4e2a3bd4b3afcba40e15e6403ab69263966c4564877627f17059cf44862591d8803edc106665aabe89e8c1378cebbae7de0f61cb62fc3409ccde14f6f7cad84b2c000586e477ce53763307e64dd665aa88edcdaa946b7bd14161de9cbb6cab6066225e44e2d4755e9a26df316680a82cd7a414a6ec6236ee162dec07edddf1421ddb9d4d72006bb025d06fe4fc7d469ce2406d91dcffa229387e52a1c481c03a3e2b3f0363a3731bfb7374a6fb59e232c9bdcc785657d1986a7e7a666fb61ea00d6d388ce75f44e31a4046e8424f00a72ae4e2d2f97e504ccf305fdbbec2d63425f5682", 0x801, r3) add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f0000000ac0)="7ebf736380e36fa93da29569445f2da1389d0c7141eb7da4b4db3bab77b5c9fff78b5001a1ccc0326a611ecaab96665cb1d1e8c182c799f70c1a1997ff4cb075bec807ed296b5be1a6fddf3f72743214631c7e2bddad35894f0b0d9d896669167b86da3af88333d8ff03fd5c393ac4f2a7eec898961cea9802c08186c44ed1eef229f95bf00e47a1e25c294b0167269401e16b759810b3f137fd43b68e39bd5f40731aec9cfd876f3aff636cc1640c5db3ac5754bb3e04a411dce65b99f7b84da5b0219d4e18a24aa7e0e9e6cefc8bf08004a5c139b2623fd2c2cf", 0xdb, r3) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000004c0)={0x4ee, 0x1, 0x7, 0x401}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$FBIOGET_CON2FBMAP(r7, 0x460f, &(0x7f0000000500)={0x1c}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:46:58 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) accept4(r2, 0x0, 0x0, 0x0) r3 = semget$private(0x0, 0x7, 0x0) semtimedop(r3, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) [ 1641.198131][T19232] binder: 19231:19232 ioctl c0306201 20000540 returned -14 21:46:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:58 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) accept4(r2, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) [ 1641.397452][T19241] binder: 19239:19241 ioctl c0306201 20000540 returned -14 21:46:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000010000000000004000000000000a3564eadfa73c750974"], 0x28}}, 0x0) [ 1641.602673][T19252] binder: 19251:19252 ioctl c0306201 20000540 returned -14 21:46:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x8000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100000000000000000000000008000000001000010000000000000000000000000a545360393095b9a1569fabc74d27ff56765735580f767cd521fe7aaf7fa2c36d99d1cf410a2277c9d4ff984200185df28ee60350376cc0cf19279c76c01b0d740896b7dfaee1bb376e379d54b512e0434d0d2697abb2c4f670545fa4dc2b9a484b92df11bd2ce1bfd98c7d40aecc20837a4fea040132a864d8833ec627bf3bb0ba11e36f86e275"], 0x28}}, 0x0) [ 1641.790584][T19259] binder: 19257:19259 ioctl c0306201 20000540 returned -14 21:46:59 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000080)={0xe, 0x5, {0x51, 0xfffb, 0x7ff, {0x3, 0x20}, {0x81, 0x2}, @rumble={0x0, 0x1000}}, {0x0, 0xffff, 0x80, {0x820, 0x21}, {0x8, 0x5}, @rumble={0x6, 0x40}}}) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:46:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x20000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:46:59 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) r9 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000080)=""/163) 21:46:59 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:46:59 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r3, 0x721}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) 21:46:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1471774a0a04267ed9a50000021000010000e61c"], 0x28}}, 0x0) [ 1642.580316][T19275] binder: 19271:19275 ioctl c0306201 20000540 returned -14 21:47:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x3f000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:00 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x8) 21:47:00 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000002cb74a2fd527e5c58a883f3ab17ac0a6c66a8b6480de4958bfdcc5ba02f45387a45d3b6", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x48000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1642.892716][T19315] binder: 19311:19315 ioctl c0306201 20000540 returned -14 21:47:00 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x10000, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990905, 0x6, [], @string=&(0x7f0000000040)}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 21:47:00 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 21:47:00 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) r0 = socket$isdn_base(0x22, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000000)=""/22, &(0x7f0000000080)=0x16) 21:47:00 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) 21:47:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4c000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1643.089582][T19337] binder: 19335:19337 ioctl c0306201 20000540 returned -14 [ 1643.246052][T19352] binder: 19349:19352 ioctl c0306201 20000540 returned -14 21:47:00 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:00 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) ioperm(0x101, 0x401, 0x7) 21:47:00 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) 21:47:00 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x62, 0x36, "6e1bcce42d654e02cc61ecf0ae34d3684162b5e425d57af698664080617c74c33df911bd145b9e4c7327876af99cf0d68016b9fa01bcc86573344c14c085a2", 0xc}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)="e58a3c20a9ab8dc6503bdc281cc98b88c1d99432aec3ef49d163fb5c543212e2ebf23dcd31a27179f1d70277c2248e64feb255e07a8fb9234cc5147dca4fc60b81eb21ee631b227951e4f4744106079c9c56cc4ab31dbeda6453babef60b8f2481c3d4c1545c4cfb05aaaabcf42ca6836eb6fefb7836169cd770ea6c63dc07308cf674751c4a5bd8f0e28a0fa382e2470b6ac96ab940fcd9589562ccbc71c76ab32e88e5fba71c906e1fb6b3f99c13955c7f8f405e9cd7ba2e8f0e131f9a527720cbdd543ee13d589eca3b25b198c31985031ec1afedd77872c918ea3f089ae4c662c1ccdc6202", 0xe7}], 0x1, &(0x7f00000009c0)=[{0xe0, 0x10c, 0x983, "658ca56cc4e3e8a2d6bd76dc94fd300eb68522ee71602a304021297e91a977575dfd84c6d06f1ac9452f7bbc65eacd7137ab7dfdc0ade0ba825d29de383589a7b396c1b74ad3adb05875be56c318f74cee97364700fe1a03fc504863c9ba1d85bf3753e8340d929ad14b085623a4e639a962b91eeae8bf62affef2e3d5c876dff150510a893d0b8c4de1502c6d1dd090146da44f56a7694bdd1e64d0c19605bfbd9e7f4169b55935e60e7945001ce76bee7ce4024e2a105f357e0972289346c2efa9b06f98a82782f2fa8079"}, {0xe0, 0x29, 0x2, "fc493e1848ac0672178ff2ecab0fc9e45a842988f770fb48a8d338a680b45ff88b3de919cdf2243b21d3a26e610d93a9b9a368d3e7ad08081f7403bfb2205b9f30f8271be96f2e376c4cda9ab3873c732c8c1c30d05e52f9ebda0c41225a41c707800ac590f7302827c782f5c0d89c0d200741ed56c5ce0fb69f61ae987e7faf47e2fc6d3543f8d4c6724883c7554dbf3302e8868c690c7548e3d5fa137c05fe991a5babdf3a05e6942f0b0c5d16721cfba24da23cbf15783aefd0c953c8cdadcc708a003731a6fdd7"}, {0xe0, 0x105, 0x7, "c93f5233ddb97f10a193f4826fbcf5d23cdac4f91edac2d04237a2f95ab935e1f953cbc685df42c89a546c63c54faaf0a8f87cf1a0cdc49768f8e1d5b2d12dd5358cbec951cdef7fd476bab34bc7a190935162293c45822bcd084d71d0c0f5f017a1b2edcb57b242c225140630bd4f00e762280ca5e0daa392cdc540f5f1a818f2f93dad0f74c5eba5d6d838d5364611204f920d40d1634cd65a0c9a4961eb466d875dd4922ac2f78682c3637d16f8b6cd64542e18db1c2c061a5c6268521da07249ca4129e37df86a7139b578"}, {0x78, 0x348, 0x2, "4424d357cbdb880a1ec352d67dff778074f59e1fee8692809d9c7b5d24e64856fb4a9e4ac68b1320822035a96ac4162c090d516378b66489c801140a8d40da93fd69df5784248a60218bb9bc6834d4dd29933c64d19319a4dea96f519c8c40d4669ac231e1323b"}], 0x318}}, {{&(0x7f00000003c0)=@generic={0x1, "55cf108b8dfe16e0700c81adaf09d9517e11a833ff10d057778130f674f98aca46348e475cf231bdbd2eb2af498061ccdf3364d7e81804a38f3c3e30c0619f00b0c49f66b196b5a0bd925960ce08904adab614090acc8ab90525864b05135fab98f666cd315993166c1c207ecc9d7b6d5d4d8cdfdbde2775fc9260793989"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000440)="be18abf1aeade2040ca4f46f5817fe5ed9e603b501abf39fd2a4dacf986d4c9adac19b60a62be45a186a563c4f84ab3e809c1e11004de35d59911c8c4fcf1011924953686e42533791f05080397e55353972cae08ec69b2f6539201599e4fd0e629182a0d33d865b0a0a7093f2a1ce2c359ae6e271", 0x75}], 0x1, &(0x7f0000000d00)=[{0xd0, 0x88, 0x9, "b35cd2f4f7b3cc798b8c392c0e4e212c20f3984f2c0153ea8aced27059d3787536b3c9b131b711efc7c4504f267656e1b15e95830dd8a25742fc536cadf8fc40e0fada55606a14664d2069517eb41f3b285168ec8434e9f4206aba871f3840d7131afb8ac61a7663a6c64c76f0a8a98f566e9a46296b21662ec587123d283072a9a3676aee3a796c33c78f8876726063ee832983e429162df3877d98e861aaaf41104f4a0ddfe63f2b37a32b970f9261435ec32441dd10e5cfab6b"}, {0x110, 0x105, 0x80000001, "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"}, {0x50, 0x1, 0x1, "a349af2b7806c91a3b87ae53e77bee71a6b4ed6a3a00ec3f6a4f124e85911b24e11a48345ac14e601e530c39d18607178a864b43cb47802c6fb1bedb6935d0"}, {0x40, 0x6, 0x8, "e2b1438ecd2b418295894b78d03e2f52c862df12eebfc8facf6644af90dcbff46243176d34c02a6f79a2aa"}, {0x100, 0x6, 0x400, "92f152f81a7ee5b1462955a70d09cbab4bdd94ca237bcb208a41dba4c8848683356311ea57ee75c01c6ec1a0e2429fa7c96e04701bc334ccac56343ec133f85b19b5f9569738a19c30f79e1a6753b37355f04351a2930fbe8548fb7585f50847184c49817bc5f0c639188978c5816cedc97f913585dc8f47bc8bc0eb4ec1413bf497598fa0f54c6625d874e84f46e125b14ced1796664143866e4e3ddc5ded4fd5953817ed1e29026c5ed790e76ef3c6d4222a977e68a134a04a8aaf6469969978cee50f670d2491113e5c2a43c9fc3bc90f4e4c857264470f07c87fbb415b353e3e22a732ab9799d248"}], 0x370}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000580)="5c2c7d33f23d0a55fc94c77d84a9feab150b1a06d0a9c939fb3041025153e36db2ae75d1e50418abd63ae711c2bc410dcd271411d1c0dd430230d5752e570b8b09eb4c0697b1a9b8ee9bf7f951a92097aaa0c543f38a5d20b279488dcb762a02cba044025b6ce2077f5ca0352f05e2deab4d1fc76af6a4c50df0e471ade8fe4a656a540af5e8f7d4ba068a7344f4d5a33e70ea24b240991eb7aafdcd6c53f946d6b5ac855899ce0107edd319a4c75bf16e289920bc3f853c1e93a2c691033a1146ee2478d3cb632121299c38c394605f3d0e1e410c", 0xd5}, {&(0x7f0000000680)="2f3e225b49f6ced7856d28b0efadccce3f727b65e33808a084793ac6524f8d9fcebe5bb0faaab201ea2ba85ca81fea02e9e597bc87b882caefa461d8f5409e29a809cd98048cc08931604fe54e51d539ebb90baa3721953c408bca48342f47448e887d76dfedfdc4a356738ce210f02f0c650fe864ee1f055a7030fb9673709d1a32b2642e", 0x85}, {&(0x7f0000000740)="114d4a5b08d103017d2b39dab48660bdf31e985f80401d2930d504ad3ffbb12dbb3f18434335162e06e895acf5346b34ad7654acf96ba914437ba66cb6e49c9e1242e106e7e70c4575ece8bf0165af13fbd00c43bef936fff8a6073b6c583ab1e2b1793cb3cbfd0a841a0828bc994a525d906f9f3ec4929c3aaba261ba30812adecf44a31d9b977e11f02a711c8b31c3", 0x90}, {&(0x7f0000001080)="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", 0xfc}, {&(0x7f0000001180)="f3f6e3b7ba4e280fbd97c416d107791b645462753c1bdf79cdff9207b6cbe286914d10b1d0b1a7b1e48d3b48f94076bb9b1761dff34280fdf939128bd9bc650b5b492f021ca47c968e0228d173aba680c75f64bf41225af3adc7867dd4e0d986552a9f48374515a60802e36a3c0d67ab22a6c5227c93a70fffe264c817b42093b19963d6ca7076007ab4c3ceb5ee4aeb11a26dda0bf6b83c6966abc3d3349d36b124adabdd7b7ce18ec6b46645add5c85c33faf44f857f6ec4c1b223071ae64ff5135ecf403eca629f", 0xc9}, {&(0x7f0000001280)="678d9489338ea6934585eaf8972e3a95e95a994ca053a9cdc9308b60461b33f27cf2251745bc194a8696f38f1581ea7cf09126115f94d13149dcc84a31d5ccf32ee6027ccfdadef0fd2f3b11cebffc7329cdd8855f224e987435c1e7b43a58ccb9987d5bc345180ebb55ccb0d9a127869b57d0e65bd9dbf37c2dee225fb36994b5b88ba9af79e4c6812d94a708aa8d5994e28aa2496d9b77b2e8d6b5be598ce437c1526a5781be325c456311dd16eadcf2d230aa419e78e678dd541d8e2a5de31f05ce5d73f22fd9153fa32f327d50e9070d04baa2041550c2833e9c8bdd9b08231ec375866cbc240228", 0xea}], 0x6, &(0x7f0000001c00)=[{0x1010, 0x108, 0x6, "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"}, {0xf0, 0x100, 0x1, "d27093fb0977abe82342f9ec8138027d3223988aab19a8aa651b92cfc82b4690bd047f5932ad185e8b2572297925a17a4002521598a8c256e9280ff4ee66d45c227fd42baef7fd96dea184b123a32fee4c233d0db30901e0bde0baa48bd9eee362f682d31117419ab908d487497cc3d4753eb749cd0e63e1044414ad479915f7945a5432a2981ecd386df2f3d021ef91be61af76ce5b885a07207fa4bd5dbf6eff1082e76dfef4305a82f6ab5e96c84794ba351ee33945f5b4def2b80220f7ce2ebbe95877eace48130f03fad578b59fc1d09a80a4f713bbf43021"}, {0xc8, 0x10d, 0xf0, "5c593516503e0013f9b93361b3c4da92a24d285b0f02d422771d41b6835a0eda587916970d081d6fa8c8ac1e6ada8e22970d924123c7cbeff79c4e6d0dd6e92922e25400cba096655b7b5424ed21c6fd911cb4433904e4982169e5e37cbf522f2794c869d8962c2f045e52122f92e0dce4cfa5de416278d7938826206738ea811fabfc66a6a87d9e3d36eb76c11252dde7dcff6ee9c72a77e399a5d2d0a74aaff3530a46917bc0fc96db76912fc67d4854fdcceada14c502"}, {0x50, 0x10e, 0x8, "f8af4d1083807dce2589fa384ac44fa0ff4ed68992190dd07080ac3019206dda14cc7deba34c363747fba3b63e1c97d755fc99ccb05beb6f52e7f3"}, {0x78, 0x10d, 0x7, "39ecaf32bd015466a501fe0723765072c65a9bbde9aa3384d685fa237d4fcd7b91ae4c617a343bafd5a998ff00f593423744a3031858e03bac3d2a5332b19f04eba22a3baf090febe8cd1a4dd779eda1c62bdbcb872e74208e257638c3d5157d3c7574b7da916b3b"}], 0x1290}}, {{&(0x7f0000001400)=@xdp={0x2c, 0x1, 0x0, 0x27}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000340)="b621b0cc81e194e73b", 0x9}], 0x1, &(0x7f0000001480)=[{0x60, 0xff, 0x9344, "29e80f68a5b8e6ecbb6b7969a0981c63fe35f8501d1f16b0a14026c31327f6817e0d7e43b44e4c0b41d340c5597030f59d3a26ff67e37351f99a127ae57d58758698524d668e4b87b94dbb94fb24b2"}, {0x60, 0x10a, 0x7fff, "ccbbbc41194d1fc9b54e9abfc7a5bd5ee58576d639fc311a2b004897ff83f4b2820d18ba5a15d0dccde4797a8a64eddb8070c54ac06a35b9f21f09f7e9b89cf9d66d49e2f9143e84bd"}, {0xd8, 0x821b3af42424532f, 0x6, "4054e359444193bcc7484202309d1679019a805e3d7f4c0807c2db4dd247c5aa38f559b72a3a35a04593527ad2575452ecc6d0ae935c29aac9d5d69268eb5a2b695b9357232e87b5aa03763b3b096cc5374a89b065a3666f6cbcce1d51882ecca7890e9dc9697abda8903561853b946127557b7228df332103a8e3ccd5c3e08555d63d746c7279bdc1e4046d969c46b8c43c9eceea120cedef62c17cc75f4dc2ca3100341e5760976a884e2ef9803dd51497765722bb401a84290821eea45d92bd"}], 0x198}}, {{&(0x7f0000001640)=@l2={0x1f, 0x7ff, @any, 0x1}, 0x80, &(0x7f00000019c0)=[{&(0x7f00000016c0)="fed2cb3c1526268acb957d0ce604e7549e316bc723bcfb820765d96f303ba1cf3eb535c686c935514cfc3296221079345a9574072bfa2d", 0x37}, {&(0x7f0000001700)="4595fa61c9464926a7ee893f5b363d48e8b2d1de8cbdff", 0x17}, {&(0x7f0000001740)="413ce641ba325e76e475ef2c527bc7eb968a306ad4", 0x15}, {&(0x7f0000003d80)="6456060029c4198b5e160b85ce062c3e739e781dc313b4f60d8c62265538941886fd923306e0279eab081dfdc6775bd4b5960ccb7fadbab8b36a29cb6dc0448672ea03ceac5e353d447c5e8d5e2539f35a52a91f4239c66e35c5207e54129382379f577010a5af6eb6678217ecef89d0ca3803a4b22d2f788ef233ad26f862e2032eab1f8a9ffc22a0460c301a8e40975387721af05d90316fd1e967f658203ece5b41f1ac856a1d897bb4721184e338a1e2289942604582c8be9e8c0e800315443c90a69a8882f182c7e2827015b18031e2d71ff2b97bf97e02342a35304345dd91614c3bfca9b407439a71061915cc2b4b69f0abdb4c91db8bfc507674247e80dc5ea8c84c513535788345a959843c315af7734b7a87daccb3f965c90f9ae906bce17b4e61292df7a80cc164d4849d1f49d9e0054ea6d1d6a062d52701adfc1a48e9879ed6020da47a3ad85ec9e9ef4f47c1953697b960a79f0fb6b08dadee9e5ec8e45b4ba68ba6804fd1e3f87903eff46d74c198d47b163f761fe1566947795b6d6529eec190a0e46da5d6062c84e5ac1278f44d7f82787783809d8d08fe59388cdfb18ca348f6ab6fb85209640e2d301cbeb80cd32de7bb7ce99169e57aa329315693c29e1b966035f5aec9c01e9a6d45b2943fe514af66d730efc7a3df821bde9774fd29e5ff72a793b06284b90a76c9601e0639bfdb2ecd65068326fcd0129f082117a2704ed60e03b64fe455b921ac9d5efe12d7fe6acacf41dbefa74daa8e5209bf82b3d5f9b7107d0fa5954bcf022aa2f54fb26d53de49094c87567cab07d9ac2664e70dbce21d08867892710a753b0265c29897d5e40fa04b064e465647eb5a50231777b325ddbdddcb208d177b8cf71042b31808a6a5097810ff0182277455e9367f84333d3d973d2a1edd8527ec12e4a675fbcaafda661a8d9e6fe97abed7298bc4fed604e2a6d68163500258cf1977fbd90e1629c4cbe58b9bad85a12d64677a899569d269d81a39afb3a7cde384c23a2d0dca0d5cee11acc44c458ccf519161865bbb97f2be2f5ef767f436cef5042f98b6e9da9debd1a052154b6776e68924c33a90a0dfe9e9bcc7def8ace16967996a2fec621c84b964289149c74625e0ef959fe1ed3be5f25c208a24c9810b84b901b50924ed40c0558227ad1c3e274caa57f607c5e5631e18b2a2e59cb2b4f9b840730a0d58912d04f86fd0b33d88539bf7111b1b8d68248837a83dc99366e12af0ca7118efec58c6d1dc6e92caee203d3a5c24c90a798e153048da622dc3fbba0d20e709653f44394567c60cc5c314f14bef35a20ea45009dce5307fb156908a32630d8db56f53c520c118e6b41abf03a1595de70dbd44e87a901af962c538e390c90c89b3bf4162b30b200cf7d14553db117a6fe4621a9592705ebd811dd113dafddf3c3580c72db730f3d4e85b984c254325a12ca64fdfcd83310a1f82b9b60c7eb7793148ce6460f10f4f3fa4088230ca64e211e645d7ff96d7fc5c850af59efb7711dc0388d2de3c68bc3e7e3469b9745d9cd44fc57a5ff8f10d3b45610b8585c46ccb69891be8c541eebdc956690616810dc3a87682be1a1b6e113c9a2b9a62dceb5c6958ccd5e2378fd253e89500ea828196fe91ee12a1df9934bf3ed3aa8e3b6ed25600e592db4fb40f5428e3c8ca020411ebb7d7ab4fdc020f2b86ad8920d4454259aa9e4f322d1bd90179a701e589eb4b923b7452373da5ddc45c731caa0003f186ce43e9fdb88f4e4bfcb867c4064921f0ea5f3f38320d1edb78bb4ea5c055d6feefb9047beb1d94aba89611b002c1e20b012a7eba88c2ed5f57725a3b6dea6d1232eb8c52245e6e87fc424b755020514c827e1807bef3d301df358ffad8c0d022930a244423a64eede791505a9369d00c617f39d37237b142adcc1fa34efa88a5ef178fab6067f3c46924451525a356b52551fae17223572563c099f3799e927d0d9e1408e16293f22c2fcb7c4f18d04fc57957f9abb89b570cea4a0a0e6fc257541415bfbd1ec1806a95c9b25321d1f16fb38778780268080c6856d2d75b963ef0b0467b02198a63c67dbfa43b62ad67e1e1468dfcc081ba2c697273fe78d8a3590c51c1c90793fe0196cf40740b7c7f9cfe8cc45fe5524a060ad84ecd6b8966292fc70645f7d133cdc3ab8448cff92608cc9f34fa9c732535daf91f3eb73036d122ec97a03dddac63f8ccb8237ba7b1faad7ca74c8724a76a8d0b57ff04df93af35893813b6c41954ba460a6abc23ebb8257b8302a4c31f01c18e2f96c8ea983a19af2da75a934a8fd31045457ba0d884bd9bc1b57feaad7a75a3fc8f57ec251a86420931b1c75fa7938bfdd58b85d7540c35eb043ee89ee7cb2b438d2c1b5921a4b5bfb5e937d0c0c65ea7a7e2be87d1b30d07ccf863228bef1a8e1f1e8a5b0d5879c86636ccbe72137ed8e09a030cc1aeca61ea1456258f61e09b9098cb0634b6c37e1dcf146a502c54f4f494776a926bae315afec7d2d2ac250bae47627d642ed9db786f397a2dcfd4db52df57413dd57fa309542357e157e47fc98b28a4c458ffcc50d39deccd37c0830a89496baa2459293c7e013a207fa3cdbb140275f4e4aa34369bd3215fd15112a120f4caf3ef6ebc4632923dd5a260076040bb13a4bca166a0974f6cb5127290f179d4ebc3b8d338f095baeabce90f7e30b28dd3c41110bf202406e7f0c6ebf31de1a46fa3328d01fd05b3a795378d63bea6ad18e179515892522ccf2f3825bfac5e397cd95b7728f7672ce59de069aca22f88ae9f615e6d6fc0bccd47d105403275d4b0ad0739ebecbe5b2f7f0b06f877721810abd6b6acc47e0682555add30b361e8917f8bb06f36b92621549a376264b7eccb7ea72a6b4f1b7f31679b5e782c8039d131eba651dee17746e284a1ab36e91d48f2835182bd94b7ead5a0fc20e277f20a860be6fc8dd18eca563faabefbe22da278fce52331d07c03d1f0c017d838949e7381a9091a88e5da2b38201e7e2b861efabaf5b3b417665f018026a8d65966c4e043f19c0313bc8446af32b14721afa60daf4f7375cd421ee389a232fad763888040b85c4745cc7074fc1eebf7fd7553a52d6ba1b7c21f0761db42f820e291663e5dfc53fc56722d91be68bb8897f6739689881f828ab1bbb8ad26ae2843080c6b3a2214ed596e3743eace94981e9bee36ef116b9db31d03c30a09dc83fd496c1ce0c1baebac1cee4d809d6b5cceba0a35354b66596e89e7e7b242de45223ebe7f8caef764b33d0b20822a7e97b7dc462aaab40d87aa9fea5a615d824639f5dff6bce53b9613b9464bb53b8cb9ae7d27c14a8904cba13bdef7aa349f53734dbf0e272d3f22f8a24eb0f6fb6f5e3bb6f8cd4d5c2178530313a9001373fdd56cc4f47a5dff08d76e47b7e600f033fffe2b1ddf0f416fa10089bb06333d3b918d5aca67d98cf27707629e86565e47fc4d586d2a74eff81a662b42c60ebf0cecc7684213e9b1d449fff4aac1e3a238dbf53522dfc49deb4cc22840044f59355c82b92c69c278b53d746ea5c72c5661b616cc1d7cf94339f3415efe2edeeb763d8e3f20c4f10e71505bb23b516ec88331152be66d39540d177b4c2772404ac9964b9365ac5d43cd865426c8515fe50ecdd1dd1fdefa1db7218185dd26c35cf46b67894e6395a0cbe3da1ff66159d5f45e4aa1b5ad69a9b99d950fa128e5efeda13ffdb372b9c0bdf2c290792e0d99563f3ecb6738937c5aa1290aea0f6e28f0970de7e4749f3b02f09ae5984bab4a5c1b1d5e4745fc1b93c0c143e7b306e267260a843603db9d13fe6b57c966c52e1f68340656af8a0a5c6f7ad8525e9e2f96db9bc0d916348e78ddf4926462e48ceb930bc22338c79ec93aa90075d16abafc9fa0d578147bc7b0a8d009d872b5977be50390697cdd3846f75b57f747fa272ec43e960cd6d841880564b65a1c1ad6e8eb90336d8c66a8d09058bd8e7d498eaa14975389e2c135ab7f450d0b8f2ec8e1c00ae11dedcce0cd7f410cd4ef00882816d93c1742f2e7772659c46facbb5c7b8f5a9e7960cf3254e9e69d29003dddd23ecb678277685455d68be28f3f9342bea7ab7432ffd9132e47daaa42bc0d52bb94fdbd58162ff73098ad4a8d158d05dfccde3792998127e5a2dbf447f5cdf28452fb141b2d80932e4d070df9233fc090e54dcccec008a73f4fdd6201fe0518a26c28422d83eeac03ffbd2bce4ecdfc6b4dd4680e3637ade27bf19e9277d5e2625857ff3c8138cf75388260e676c19dbafbcbbdb58856eb68b1328c0f0baff028093fcdf74208cfaf4d59f9de4ea541237b1dacc081c5d05bee31a77c69dc26c2b053d346563d3af2d085027f72208269a049ba334d80ad816da786115ae963256479364bdf66811d42ede6d40145613e3fe3f7b811852bdbb98457f34d98319909cf7a636a6e4083af9b22ee98c8c00fe76ab1d5bbcc756cd122b255d08a5dd8093b10219042a799836da3fba2a11b1f8d721d9b5234e718b11d8a705071817147552c9b28394c0ac0c2d155a1cac250cef3b0c284d63930c45ca835df132d61d0e3013e8880c59a01df56910e975b57e038907bc000494e2c0aa83a3d76bd947835b9dcad713a9d7d6189e93ec232fe80b79e45389ccc90377c6913ed5829c3c47f01c1902569e9d408fcf2d53acf595d0f967c824d653e2a26ac587c7e3c1dbf3bf7c2f4103dae5081950a61f6c8b9ce72770c0ef507759bd1fbd4e92c1d210975c2ceae14305652777ff9c6f1644928f5e3b22817ac78799ae42ecf2873257dd5f0ce91520d31406fdf740d23811c2a3c3c06c9133fd1db6d2aa0382673d5a63bf39496f077f5b1df2e4284986c1de3eb58feed700f26db8f4292fc2aca32f9ca8a5f8e39ac0e72758d362bacec11cbe6cf8c6a5b8e35f15decd1937f9c001c3576282ad92c10bba7ece8c922d1d40d441500179caf0c74ac22139e6053f0559e91a6abb831e2fb7797bdc743568a72afc7525ed557dd7971a87fb7304684f995d2cbc5cbca199744758d53ade90e11904ec2c93764b8c73709fbf7eddc3c82a03d1a6b2e5064fc55f5fa2679e989f1274a2dfaa2f3b9a0ef140de043592010ceaef844de6a3ff8fbb8719586e618ecc72a4a24997de288df878aa9b61a6e89f6ec25bbf8c6f9d2737833d3114cee432996719362aefc62e7eb495133e63170fe83934404051056deec9cc0ba90131e616e40144472e59c37f0882be8bed097193637646e8e5113c16444d85d680915f0829be4ba156592ca68dbce5d46f6e046493afbabde3dd1134c849a548e846bcd0a31f4a045fe326efcbd7227fbdb101e65a642be35327a17a8c4b5ba80e062723ae3db93d1e20086e8e82f49b49ee09f4aef8baae0179f4ac74a497a811478aa5757a2fffc8f763f7955a0800fb9f112cfd6428fd266971dc818925345bc75121cfe1bb57d7c6ea5903271e30d62beaa04f89f343f701a29d952cf1242d9d7af13e794106ea1bb610fa5cabe4aab98ee88bb708d8351ea85d15cc47810787e1f736f722037f1207fcbf5b1102e0b2a3aeb8b82d111ff7ef7f14c3f19ecb5a4e80a91884b7aa1e152b2d5c8dedc9a89e1301d55459ac55c1c30b77a9031e7c57acc5f4e11e707ebf8ef346c4b83e6df05bf14eef2eb55d4723f76fe4f7a70331c4d134d3b7cbaaafcb385aa0e2935c05e61a1226c95f7dd61b08055de44dec6691d531752e511c2bdaaa4ef7fed79aaecd1c91d87a143588ebd14951c5a7f84af2cb54b1a", 0x1000}, {&(0x7f0000001780)="8b1c5ac9e67a9d4aeed28230ce0fb8366328437771551dfe0712e772f29b4612ba316779e6439a5b06b9c7b64c9878f406635775c76e801186fc62cdf612b8e2c3a8918315973b6ea97ad9b35f2a05e531ef6253b3cd5b3be6b052f3d4464a89f480c949a0b59218bb3adf9dc28533461579f16e9b", 0x75}, {&(0x7f0000001800)="7467e52d768bb1ef9204d190983afc8352e04e6ff28b729d99c3475caff7c961b42b54b6d22723a4e3a6da6e94febaddb2a0", 0x32}, {&(0x7f0000001840)="0bba7b642cc345b83ac60f757753779dee4e3cc0bb", 0x15}, {&(0x7f0000001880)="81ea6eb6af9217534bd3989798743f3a2248962e9f76e69551322fcee9dc6814afdcf7fda182c2a5a4f8d2270182015889036a2d88b68332ec340dc1698c71db123bc6cee927602958b2e6c210b7ae576be66b551fc72276cd422632209a6a724d653b64ad55a6a825165ebb7fe622fac7a50d96ea945b882e99ffdcee92a12a664e205c76880cae0eb203aa0df20b042a0fe6c6011dd8afeea0455f868fe2636dbf6e0bbdf3e1c53bde68510d131c8e5d2ba434ba55941b3ff4d9d648ead57cfd58ca366d071a6de7a6dac8e4d4e4d27211ac973a755fde9447d3ad3f8d06a65a8fb8ea70", 0xe5}, {&(0x7f0000003140)="2411a8753f6b537e0c7dda502113a88e062b394659ded373c46501fb01fa24889d6c452e0dfaaa959a25d279dc55e1c230dce2be4837de91f52d254a6c61531cd4ac", 0x42}], 0x9}}, {{&(0x7f0000001a80)=@nfc_llcp={0x27, 0x1, 0x2, 0x1, 0x81, 0xfe, "c1a64d3767dceb4c455713e13763dde302ae9a47bac5d88c2b44cdf64233b86daaa3d7b37679af5014ce59b7c4a78bb9e7d3085f6e6610737292df5f081cfc", 0x8}, 0x80, &(0x7f0000003240)=[{&(0x7f0000001b00)="c1a2ed80833e1f04d7d985a274feb94932ec", 0x12}, {&(0x7f0000001b40)="046da3fd0137806cc681f230e57c0c4e9899b986fa5f29b9325efc71a12d9333fa3c2ebd", 0x24}, {&(0x7f0000002ec0)="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", 0xfd}, {&(0x7f0000002fc0)="374f1cf257", 0x5}, {&(0x7f0000003000)="9310e9cfcfe718921d6b5550a6e80bdf29737775646c138bf4a7bd44489cc42a28d9ff52f2f6af9371a1335c1d29ac07edff133c5b176a34b559f369c4da15229b24899d0e4476c65d2d4770fb9c57561454e31ee47005f63eb5b2282796beb0d7400676986f6bdb9d20d1f1fd3debf44c74cf608c7205e92e294a0bf4420cca9e6e4efb5a14eb6e4c49e07ba141b10503f28e5b8876e783a933453f838a80dcd6c606a862a4c99449e9a6d8fe5d313238fcfef021b6869de30c6e606e2317db754f6b4359e5", 0xc6}, {&(0x7f0000003100)="07e2923f51c2c9d6267ff8244dab078f839b1fd84fcffd4e018d089c8b", 0x1d}, {&(0x7f0000009180)="dbc060b4241664ce650b9a80bdc0ff07000000000000f267736886e6edf4349816ae250e53c557ed4f006c7ecb9104906a7d17f393698f1d49784f4eea0f8889adf0ef303003e92e967cfc5429761b59f29463429a36fa9f87b99a36bb4123661356640af16e491dd7534750524286a625c7826d29c221bf97ad4c085f7fe6b265259ffeb07a38299a4f99b76c720251065c356227c298fa75b3586d95832a22425909e123045a0b51a71675c8a7e2484a14f0beb91d09fee447ad9ea08ef6adda58a8db2da1a7f65386cd8e8f1557baef79761beb221dcd29bb5cf581f39757031a9466dfe68fade0b347b9e34b9d2f745544047ce129b264b088acc71b429b9b1a23f34e710dfd533798fb19aaab277f44597cb7b82f316bc049e357c1e04cc917b4c87ad02b29c552922b3f713fbfbc6d9692fb9709467f6edd925e5ed0c04327c90b7036614859c92521bf41c4528e4ad046b5dcd473779415e04acbf09ab550efc0cf136270cafc7989c932fd45d454206b086ff3b5ca347015c1c92b2c7819", 0x182}, {&(0x7f0000003200)="eb517b3e044df22cef6e0905fb5cfb", 0xf}], 0x8, &(0x7f00000032c0)=[{0x110, 0x0, 0x2, "f59f04a9a0e1012fc22d36f2e98d0a5ec6db5822650d883fd093d50c6a623154389e839ca6d70f864b3804604582236604962994aa87004b98951015fd84acde4a951e9d37380eb2dd5b192725a9490874dcf001a3caa81e023cfec94dd601d2d4b3ac916017849e9f7e9862cb3f0301ae78dff002ee33d0d56b202c7d92561d51a72e5c98ea5b9140529e8a6ca3c733ebcec92d3c4d2ea103b707951bf8c178728306ad5edab8015906a6232f69e45ff1fc756d6b7908eb95370c12b91bea738d6faa6e3bc2dba31128ed428f6700e3a385627a5f0e2eb0970db10e70d7c9398315ac1de4f745a07e94eeb55beb8f050f8f2527ab43a78f92e86cd69df465"}, {0x48, 0x115, 0x10000, "f13f2588271fc69002e68bd54da4928ec365ee76398810e64d6572d726ae1e8e2f2055d07e9e181a25de58dc1279d9948dd62d05cd"}, {0x58, 0x115, 0x8, "2d14e33c5f24bba61e6e6d7f58af532f1ed9b745ece322e15ac51f76bcaf764792855997b740d2eb81d16374bcb7390207f91207e280ae4e29f64bed1e472c06334873074851cf"}], 0x1b0}}, {{&(0x7f0000003480)=@ethernet={0x6, @random="21a815002332"}, 0x80, &(0x7f0000003540)=[{&(0x7f0000004d80)="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", 0x1000}, {&(0x7f0000005d80)="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", 0x1000}, {&(0x7f0000003500)="d1c7ec02f77fd1705082d4b4e8432f4b94a6c39493fe454e03ad5e9d9a56e1487b", 0x21}], 0x3, &(0x7f0000006d80)=[{0x68, 0x10c, 0x10001, "d08737633cb9d151493fc361b89956f1241bde967d88b1393a8f726e4afc50ab4d3c0b02d476e252419965e65a1571c4dfba11e4cb20f921fef67b3c70f984facaaef38b93064aa21bbba197f03f0cda8da5"}, {0x30, 0x6, 0x10000, "4206690ee6d31da21609eae4d1bc99929b815d14a410ebde27"}, {0x68, 0x108, 0x10000, "dbddf3f65eb8ce686584bbd9e540ce8c62c22afd1d948dc121dd5f067c8f385dbed43df527acceb69853f5c8106d0920d2dc55159822e0e9ff015df35aeb39214add917a8cbee9185d8e4f2041edee26457862681f"}, {0xd0, 0x105, 0xa21, "c39d4bd0f633a675f16db57e4db6c6fa4719735f2a0af7d7eb088f9b21ccaf9da6e0235f42809f9dc253084b76b9746376c130797c23ed515149de7308da40552ea18099aad47367f8f5ea589f8960de10321429bfbbe0aa0088cdec6ab988ec5d66d109907592a4e0d257dfa5ca1d2f13ea452b9bb7af0e5b940c9e161762a4be1cb2190339f2b850ad4091ed07182e2334f13ee5ffefa59bc4839775eb046d02299bb39901b738d27c6d667927fe6186d407b4a113a9e929a5d9"}, {0x10, 0x0, 0x80000001}, {0x100, 0x88, 0x9, "45db2165270a68bd3f5fd35a396911bf240683a40f53f23648dd318b03826cbe8da538e3cde619fcb1190275c89bac7f2338b46405d2170d4950867b4337900b204d0d0b1c13843cc8f4395c80f63afa5a310c744bcac1f53b6d5e7c0d12bbfcc39b1153b5d815dfc24dabb372b197131b7bf0499acba0f2731aa65f0bd2c0269ef2026d5ebdb7964389901c341d5e245e36c2885d56378c48030c264157da019bd84ec0d776a83632a2de170906d601653384eefc7049654cb8287dac94ea55f757418b7183ee08fbfa7d9defdb8f1075758aa4cb5905165fa43ea959b625672428922ed672b1bccc461c5905ba"}, {0x1010, 0x3a, 0x6, "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"}, {0x110, 0x115, 0x5, "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"}], 0x1400}}, {{&(0x7f0000003580)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x80, &(0x7f0000003900)=[{&(0x7f0000003600)="f14962296b253746a8b66bc4ab43d60f5182b9b4f6ecd6765e72fb4b2bf67a173311b224e30c8834e5644cdc8797853bcf7ee69140a74ca141df181f76658fbc4ff31bfbcef1c243445218c172136f57066454c91b9a5a0c31e51f04a54a73e94dbed10386bca3fd32f0ab1d9a7e1f02080b2864ae42dbf8590efbdc5a5518aedcf23d48d556e9c58c1a247ca16fcdf8b03896e06d6b20c298ac15c56a0a60af5f80f063fd92e38c9889f63f3fc96596053cb62f", 0xb4}, {&(0x7f00000036c0)="73cd8ae13e7d2ca887ee41325573896a5d728af5eecd2072ce7f91aa169e4972d121367e93d38716559defe7e7867076a060ef4b634916804a157232099623388aaa0c519608689a6af6e2c727273c15e2fe783df54ef5b89ae8ceb941de48d318f46c558af0c654377d0f118a3677bc044a20da9eb62bea091ed058f8f3d51c1d1045c477f52109f7d59c7e6686aaf678943b7d5297c1661f0612790726355537490b9908578864edbbb9340ad178d4a2d80e3f780f8c93151f964de6a9e113f58f39f66338477f5ed5ebed7071132e0251d9f521a2b109261d29b3d3663fc18d345ef7a638546d9ebe88028d5212b2bda091f1c6f69602247cd446", 0xfc}, {&(0x7f0000008180)="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", 0x1000}, {&(0x7f00000037c0)="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", 0xff}, {&(0x7f00000038c0)="d871f0c3906fc1", 0x7}], 0x5, &(0x7f0000003980)=[{0x18, 0x1, 0x8, "bb001199"}], 0x18}}], 0x9, 0x4) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000000000000000a"], 0x28}, 0x1, 0x0, 0x0, 0x8000011}, 0x20000814) setresuid(0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r4, 0x0, 0x202, 0x0, 0x0, 0x10000007c) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, 0x0, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) chown(&(0x7f0000000000)='./file0\x00', 0x0, r6) 21:47:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x60000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1643.457038][T19363] binder: 19357:19363 ioctl c0306201 20000540 returned -14 21:47:01 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6}]}, 0x4c}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5b}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r4, r5) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r5, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:01 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) readahead(0xffffffffffffffff, 0x1, 0x7f) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000100)={0x3, 0x8, 0x5, 0x475}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x208000, 0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000000c0)={0x2, 0x1, 0x7, 0x10, 0x144, &(0x7f0000000240)="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"}) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r3, 0x6}, 0x8) 21:47:01 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2080, 0x114) recvfrom$unix(r1, &(0x7f0000000040)=""/109, 0x6d, 0x1, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:47:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x68000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:01 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = dup(0xffffffffffffffff) mq_getsetattr(r1, &(0x7f0000000080)={0x4, 0x8000000718f, 0xff, 0x4}, &(0x7f0000000180)) accept4(r0, 0x0, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xd089, @mcast2, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x2, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000030d0000000000072ad992090a14f5ffff0f0059cb5c0b4763f93b00"], 0x28}}, 0x0) 21:47:01 executing program 1: personality(0x6000003) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) listen(r0, 0x400000001ffffffd) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:47:01 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) [ 1643.829890][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1643.849844][T19380] binder: 19375:19380 ioctl c0306201 20000540 returned -14 21:47:01 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6(0xa, 0x40000080806, 0x0) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6c000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd56]}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, [], [{0x80, 0x6, 0x3ff, 0x2, 0xfff, 0x2}, {0x9, 0x400, 0xffff, 0x8, 0x7, 0x6}], [[], []]}) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') msgget(0x2, 0x89) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9c}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x75}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) 21:47:01 executing program 1: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000000)) 21:47:01 executing program 1: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) [ 1644.300501][T19406] binder: 19401:19406 ioctl c0306201 20000540 returned -14 21:47:02 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) 21:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') setitimer(0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:02 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) r9 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000080)=""/163) 21:47:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x74000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @remote, 0xfff}, 0x1c) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000004fc8)={0x0, 0xfffffffffffffed4, &(0x7f000000b000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400850018002100677b8a508c3cbe2a1c140000fe0000010000000000ae40c2eed9877efc617a484f7200000000000000a5cd931d24af0fa90d90d5f6f63cc31da6a432259ef7c286ea92a8ac7c6509f290579a592eefb1e9b49588d753e93c1995a81bc706c70000"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x5c, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x15, 0x1, '/proc/partitions\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, '@keyring{\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040050}, 0x4081) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40810) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) 21:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107008000000800000001000000"], 0x14}}, 0x0) [ 1644.720304][T19433] binder: 19426:19433 ioctl c0306201 20000540 returned -14 21:47:02 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:02 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/82, 0x52) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:47:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7a000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:02 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) r9 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000080)=""/163) 21:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) write$input_event(r1, &(0x7f0000000080)={{0x0, 0x2710}, 0x3, 0x7, 0x8}, 0x18) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x100, 0x0) 21:47:02 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000004c0)={0x0, 0x3, 0x7fff, 0x3f, 0x9}) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x0, 0x104000}) [ 1645.180138][T19470] binder: 19463:19470 ioctl c0306201 20000540 returned -14 21:47:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xff000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:02 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) r9 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) ioctl$EVIOCGUNIQ(r9, 0x80404508, &(0x7f0000000080)=""/163) 21:47:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [], [], [0x0, 0x0, 0x0, 0x401]}, 0x45c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r7, &(0x7f0000000040)={'syz1\x00'}, 0x45c) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="14000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC=r4, @ANYPTR, @ANYRESOCT=r1, @ANYPTR64, @ANYRESOCT, @ANYRES64=r2, @ANYRES64=r3, @ANYPTR, @ANYRES64=r5, @ANYPTR64], @ANYRES32=r6, @ANYRES32, @ANYRESOCT=r7, @ANYPTR=&(0x7f0000000b80)=ANY=[@ANYBLOB="d37a98bd3de921f5a60386b744edaa6181584cd3efd66377ddfa513833923022f63a1a673bf30c2cf097849ed1461fee92d0b58e96e174d8cd921c63147c9a009116786c7411bb5e0191f3a9db8c2bfba552f9c02c4d1c1063d0208f16606ea818f4cf604c485c07b98f8ff755f9b3cf4f79fe3b9bed2a586078d0aec154b859b370220a1312ab6ad5250ef95eb0b5f80e1d03cd29bec4019956a2df62665d2bc0b99370e6b8db2d830ebc71297f57f5fe5f2adee0ec441446fd9024865e5f6b348503b34921a291", @ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES64=r1, @ANYPTR=&(0x7f0000000500)=ANY=[@ANYRESHEX=r0, @ANYRES64, @ANYPTR], @ANYRES32=0x0, @ANYRES16=r5, @ANYRESHEX, @ANYRES32, @ANYRES64=r1, @ANYPTR64], @ANYPTR, @ANYPTR, @ANYRES16, @ANYPTR], @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESOCT], @ANYRES64], @ANYBLOB="21070000000000000000000000004800a4bc84a7f4bcbd596fa3eaf0ffdca7ea66cb54cdaebcd673466bdd5c1269aa8b222fa06f0cdd5fe20b4bb0c7bdc2df6508c9ca952841aa8b3b62d6f2d1f504190ccef0404ecd70210a22d3d228c314be60fcc7"], 0x3}}, 0x0) 21:47:02 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)="4f86afdb4b6f09e004ad78999ce05e8b12fb12da611a8ccb87e103fdfca8f354fd1b35447d2352b7ffa5f889d767fa420d7e0e151df105dc8598de3aaa8e3760795cf43eaf66a4309e0f4cd35ab8a3af5245b4621157902380fdeeb7f17d69c8347824d6790a4cb9d4f6fb9c9355e5e7339be285e5cf32e8356f37d02fcc1683705f7e41250ef94c7877d6d3aada9b630527987acfee02ba9b4a3bf46788b1d06dbf3fe9d6f7dbf7fa4dc4aa98eb6a5f7eac0a770b9f77d538c9caefd78e6f386c56a12103e8b52be40588488514400db86fdea81c15f92a", 0xd8}, {&(0x7f00000003c0)="2ce7711a31443f11a9471227edb8c9b17ab4a0c79fa94b87ad689a02941f0b8a71c87cad534c5a8137c3c6958ab36eba46207e8b1325e04f75e8acc4aec8fcb8a263bed069915d082dabc025dc578c8b219e6a3daca4d24a37a070f69b64415f5090b189b964a67eda43137c9f4bd6d4938154e4251835858d5e5f13f4f28bbad1d5b855e04294da3f3a9eef40871481b71fb23b0bd3f908802c9caa315772302b7ec4108f2e5804034ea3e5e94c1e93f94a008b46075b188c24d799238a9ab721022e655a990d71eaf7f05e2264d7de76b7e82af2f3b8f49e", 0xd9}, {&(0x7f00000004c0)="f735836d04a99b12fef88a313cd7147c166612a3346146b858ed622b5351be21ff2d47679216db870e7c4e091697074aeaf5f0812c007dbe176d5ff6f7683960a857ce1450698d9c2455508c3a77706abb97282d169401f3234b5d2fd14ca5bac834892d", 0x64}, {&(0x7f0000000540)="71697f907b88264fb06d0f0b6d20e72b3142857fa6b698c0eda5fbe632b3cbd65d99aa833f0b9794d4397654511ef35f3ddffe35ff269b3264df0aadc8408ee22c33acc711d0fd673f17a16a2457b1344368db556f3b5ac66a", 0x59}, {&(0x7f00000005c0)="117e6012073926083e85a47f54a9d64ffb089378061e0d3d6d22f553806b812b583e88826105a3fc9ac7f3c9073833d66e11daa6deb7a04d7083428713df20538fcff421b15e6a178f6ea9825a38ed3020005a8f834699da10160c0afdb2859ee3d30077c928b76ca451624a0a9a77031b126cb23f8c3615c8d9059ac2e63530e5e9b5b14e2bd6ac48ccef", 0x8b}, {&(0x7f0000000680)="f51c78ac3cd3ed1ad05fc797daef46a284621705a50339607aed7e32b902d19fcdbdd2b2864f662ad85d38989d1f7a3c5fe8385592015d76819729eec9bfada56fad61e754937606e53131a8a69a29f34501c6199ba0b38a3a806d", 0x5b}], 0x6, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x200080c1) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="838dc3bcb562b3276f21ea83ae0e695fb3fa06669dd1476fc1943cca9dca93b9c2e2fbe96769f85dc930788eb6be14a451accddd0c15c8a12bc635c902edafeec9deaebef17e9e6052d1ab522f4191091105482288ba054442b513d0463b795a3712a20feaed2a99faf4bee5f366ce845be68e30a799ee664220a91ad65588b83f0705b3509452c04728c59645f92078865e000000000b10c998aad05aac594e23e7f97ce56d8f54a48e00008bed699758c67e8ef09d2e4d60bfceea15854e57ed4cd9431fda60ed35c5f20bc1f7474dea591a29fadc8216f7b55def45fd947a894f8d06f1f00af6c8156caedd8766a698"], 0x0, 0x119}, 0x20) ptrace$setopts(0x4206, r2, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/2, 0x2}], 0x3, 0x0, 0x0, 0x0) tkill(r2, 0x2c) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002000)=0x0, &(0x7f0000002040)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002080)={'vxcan0\x00', r3}) getegid() [ 1645.469894][T19504] binder: 19502:19504 ioctl c0306201 20000540 returned -14 21:47:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xff600000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000010000000000000000000000000adf648a5c98fbcd231c40cc60399143692e27695f422a780e9f8f"], 0x28}}, 0x0) [ 1645.766373][T19540] binder: 19534:19540 ioctl c0306201 20000540 returned -14 21:47:03 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:03 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) 21:47:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x400000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @multicast2}, {0x6, @local}, 0x0, {0x2, 0x4e21, @remote}, 'dummy0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) [ 1646.033621][T19545] binder: 19544:19545 ioctl c0306201 20000540 returned -14 21:47:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x60ffffffffff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 21:47:03 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) 21:47:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000040)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/nvram\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000500)=""/146, 0x1000000, 0x800, 0x6, 0x2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) [ 1646.252147][T19577] binder: 19575:19577 ioctl c0306201 20000540 returned -14 21:47:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x1, 0x251}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r3) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000700)={0x7, 0x0, [{0x4, 0x44, &(0x7f0000000100)=""/68}, {0x4, 0x0, &(0x7f0000000180)}, {0x100000, 0x1000, &(0x7f0000000b00)=""/4096}, {0x5000, 0x1000, &(0x7f0000001b00)=""/4096}, {0xf000, 0xb1, &(0x7f00000003c0)=""/177}, {0x0, 0xbc, &(0x7f0000000480)=""/188}, {0x0, 0xc1, &(0x7f0000000600)=""/193}]}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000540)=""/168, 0xa8) gettid() r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="a107000500000001000000000000"], 0x14}}, 0x0) 21:47:03 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000040)={0x9, 0x1f}) 21:47:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x790000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1646.467595][T19588] debugfs: Directory 'loop0' with parent 'block' already present! 21:47:04 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) [ 1646.532311][T19609] binder: 19606:19609 ioctl c0306201 20000540 returned -14 21:47:04 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7fffffffefff}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:04 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) [ 1646.884226][T19636] binder: 19635:19636 ioctl c0306201 20000540 returned -14 21:47:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xb90000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = accept4(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000300)={@mcast1, r5}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:47:04 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) [ 1647.085383][T19660] binder: 19659:19660 ioctl c0306201 20000540 returned -14 21:47:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x30670100000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1647.267407][T19668] binder: 19667:19668 ioctl c0306201 20000540 returned -14 21:47:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x30740000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x8010, r1, 0x60164000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000b00)={0xbb8, 0x1, 0x5, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x2, 0x44d9d22}, 0xff, 0x71, 0x4, 0x251f, 0x4, 'syz0\x00', "d0f3e6e12097583ecd9db8e83a5829dbf256bf66da9370da69c052dfb87b9aca", "73af291640b63cf5cbfe0e0325b248b30265282a7c099ecdc6659e851d87c8c0", [{0x9, 0x8, {0x0, 0x80000000}}, {0x0, 0x6, {0x3, 0xffffff80}}, {0x0, 0x80, {0x2, 0x7}}, {0x1, 0x8, {0x1, 0x1}}, {0xffc0, 0x1e, {0x3, 0x8}}, {0x1b, 0x1f, {0x1, 0x7}}, {0xfffe, 0x9fd, {0x0, 0x1000}}, {0xffe1, 0x7, {0x2, 0x8}}, {0x8, 0x100, {0x3, 0xff14}}, {0x9, 0x2aa, {0x1, 0x1cf5}}, {0xbc87, 0x9, {0x0, 0x1}}, {0x4, 0x20, {0x1, 0x2}}, {0x1, 0x5, {0x3, 0x10000}}, {0x80, 0x9, {0x3, 0x5}}, {0x3c, 0x4fa5, {0x2, 0x4}}, {0x0, 0x0, {0x0, 0x5}}, {0x9, 0x1, {0x3, 0xb30e7ef0}}, {0x3ff, 0xe, {0x1, 0x1f}}, {0x9, 0x8, {0x3, 0xd10}}, {0x5, 0x904, {0x6, 0x9}}, {0x8001, 0x73b0, {0x1, 0x9}}, {0x7, 0x5, {0x0, 0x9}}, {0xfffc, 0x7, {0x0, 0x9}}, {0x5, 0x1ff, {0x3, 0x8}}, {0x100, 0x1ff, {0x2, 0x4}}, {0xc082, 0x3, {0x2, 0x757010cf}}, {0x8, 0x2, {0x1, 0x7fff}}, {0x53ff, 0x7, {0x2, 0xae3}}, {0xdbda, 0x1, {0x3, 0x1f}}, {0x14e8, 0xc0b, {0x2, 0x8}}, {0x1, 0x3f, {0x2, 0x3ff}}, {0x4}, {0x7, 0x3ff, {0x1, 0x9}}, {0x7, 0x4, {0x0, 0x3}}, {0x7, 0x3, {0x0, 0x9e}}, {0x0, 0x2, {0x3}}, {0x25b7, 0x0, {0x3}}, {0x7ff, 0x3, {0x2, 0xb7}}, {0xa514, 0x20, {0x0, 0xda18}}, {0x3b1, 0xfff, {0x2, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0x5}, 0xa7, 0x7, 0xfb00, 0x800, 0x8, 'syz0\x00', "8757b9edaba3b0a08fb171ef9f700ff7a42eea7f9520e4f4fc3037ece7c1b0f0", "ce556d9e553383bccfc89e6b3bc4a1531f19688ef68bf358d9e41e91de338dbf", [{0x6, 0x1000, {0x3, 0xfff}}, {0x9, 0x100, {0x2, 0x3}}, {0x7fff, 0x8000, {0x2, 0x3}}, {0x4, 0x8, {0x3, 0x5e5}}, {0x0, 0x2, {0x3, 0x3}}, {0x3, 0x3, {0x3, 0x85}}, {0x7, 0x1, {0x2, 0x6}}, {0x0, 0x401}, {0x0, 0x1, {0x0, 0x7fff}}, {0xffff, 0x3, {0x1, 0x2}}, {0xff, 0x80, {0x3, 0xd94}}, {0x0, 0x1, {0x3, 0xff}}, {0x40, 0x1, {0x2, 0x5}}, {0x8, 0x7, {0x0, 0x1}}, {0x5, 0x1, {0x1, 0x8}}, {0x7, 0x4, {0x1, 0x7fff}}, {0x9, 0x7, {0x2, 0xfffffff7}}, {0x3, 0x0, {0x0, 0x7}}, {0x2, 0x1000}, {0x6, 0x7f, {0x3, 0x5}}, {0x3, 0x5, {0x3, 0x2}}, {0x8000, 0x6, {0x2, 0x69f}}, {0x1, 0x9, {0x0, 0xdf6a58b}}, {0x3, 0x0, {0x0, 0x6}}, {0x914b, 0xfffd, {0x3, 0x7}}, {0x7, 0x3, {0x2, 0x8001}}, {0xff00, 0x1ff, {0x0, 0x8001}}, {0x1, 0xc3, {0x2, 0x100}}, {0x800, 0x7, {0x3, 0x5}}, {0x2bdd, 0x7, {0x2, 0x9}}, {0x1ba, 0x89, {0x2, 0x6}}, {0xd62b, 0x9, {0x2, 0x7}}, {0x1f, 0xe2, {0x2, 0x1}}, {0xbb2, 0x800, {0x2, 0x5230}}, {0x0, 0x51b, {0x3, 0x81}}, {0x7ff, 0x8001, {0x2, 0xf45e}}, {0x3ff, 0x8, {0x1, 0x4}}, {0x8, 0xb5a, {0x3, 0x6}}, {0xff, 0x6, {0x0, 0x1ce}}, {0x81, 0x200, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x80000000}, 0x1f, 0x0, 0x40, 0x2, 0xa, 'syz1\x00', "52bcc82d46e461bc781a0ece13cb69b8d44a5772275ea0682c1b49e2b4d88671", "e4714907f8aed964204602eea2120609c8c77b28bd2977d6bd32149cec44a9e2", [{0x400, 0xfffc, {0x1, 0xffff}}, {0x4, 0x5, {0x0, 0x2}}, {0x1, 0x1ff, {0x1, 0x80000000}}, {0x3, 0x400, {0x2, 0x9}}, {0x8, 0x0, {0x1, 0x4}}, {0x3, 0xffff, {0x3, 0x7d1}}, {0xc9, 0x7fff, {0x1}}, {0x1, 0x6, {0x2, 0x4}}, {0xb9, 0xc000}, {0xa2, 0xffe1, {0x1, 0x1}}, {0xffd0, 0x9, {0x0, 0xffffffff}}, {0x40, 0x5, {0x1, 0xffffffff}}, {0x9, 0x3c, {0x2, 0x5}}, {0x1ff, 0x9, {0x1, 0x2}}, {0x0, 0x0, {0x2, 0xffffffff}}, {0x5, 0x0, {0x0, 0xaf}}, {0x1ff, 0x101, {0x3, 0x9}}, {0x8, 0xe, {0x3, 0x1}}, {0x1bf1, 0x7, {0x2, 0x9}}, {0x1e, 0x7, {0x3, 0xffff}}, {0x1, 0x1000, {0x3, 0x9ba}}, {0x7, 0x7, {0x1, 0xfffffffd}}, {0x9, 0x9, {0x3, 0x8}}, {0x15, 0x5, {0x2, 0x8}}, {0x3, 0x8, {0x2, 0x1}}, {0x4, 0x8, {0x3, 0x1}}, {0x9, 0x9f, {0x2, 0x81}}, {0x4, 0x100, {0x2, 0xfffffff8}}, {0x6, 0x7, {0x1, 0x26ed30ce}}, {0x2, 0x800, {0x1, 0x1}}, {0x7f, 0x0, {0x3, 0x5c}}, {0x748, 0x9, {0x2, 0x7}}, {0x7, 0x2, {0x2, 0x1}}, {0x100, 0x5, {0x0, 0x3}}, {0x539, 0x2, {0x3, 0x3f}}, {0x800, 0x0, {0x1, 0x2}}, {0x0, 0xfff7, {0x1, 0x6}}, {0x8001, 0x0, {0x3}}, {0x9, 0x39, {0x0, 0x100}}, {0x200, 0x8}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x99, 0x6, 0x8000, 0x4, 0xc, 'syz0\x00', "bfba25cc4ecd094b1eb2e37b703d2db4d05269e0d4c0f1b9fcd150fc87215416", "d5d4aa06aedd12a679718d65a7b6bd77f4ac65683e0e61b82ba736b2d93ea573", [{0x5, 0x5f1, {0x1, 0x4}}, {0x16b6, 0xb76, {0x3, 0x1}}, {0x3, 0xfffc, {0x3, 0x4}}, {0x3ff, 0x4, {0x1, 0xfffffff8}}, {0x6cdc, 0x9, {0x2, 0x81}}, {0x2, 0x0, {0x1, 0x7}}, {0x7fff, 0x2c, {0x2, 0x2}}, {0x0, 0x3e30, {0x0, 0x1f}}, {0x5, 0x9d, {0x1, 0x4}}, {0x9, 0x3, {0x1, 0x1}}, {0x7, 0x7, {0x0, 0xfffffffb}}, {0xfd01, 0x39c0, {0x3, 0x4}}, {0x6, 0x1, {0x3, 0xefd}}, {0x7, 0x3f, {0x2, 0x2}}, {0x8000, 0x6, {0x0, 0x8}}, {0x5, 0x2, {0x1, 0x5}}, {0x3, 0x35, {0x0, 0x9}}, {0x1ff, 0x5b, {0x0, 0x1}}, {0x415, 0x4, {0x2, 0xd1a6}}, {0x20, 0x2, {0x3, 0xcfa}}, {0x2, 0x79a, {0x0, 0x3f}}, {0x400, 0xfff, {0x2, 0x80000000}}, {0x5, 0xfffe, {0x1, 0x5}}, {0x3f, 0xffff, {0x0, 0x1ff}}, {0x8, 0x9, {0x0, 0x9}}, {0x1ff, 0x1000, {0x0, 0x2}}, {0x2, 0xac, {0x3, 0x40}}, {0x40, 0x3, {0x0, 0x2}}, {0x8, 0x7f, {0x1, 0x401}}, {0x8b7, 0x9, {0x0, 0x12}}, {0x2, 0x3, {0x2, 0x9}}, {0xfff, 0x43f6, {0x1, 0x80000001}}, {0xd1, 0x1, {0x1, 0x200}}, {0x8, 0x0, {0x3, 0x3ff}}, {0x5, 0x1, {0x1, 0x8}}, {0x0, 0x7fff, {0x0, 0xfffffe55}}, {0x5, 0x7fff, {0x0, 0x20}}, {0x2, 0x2, {0x2, 0x7}}, {0x80, 0x6, {0x3, 0x43}}, {0x0, 0x3f, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x7, 0x4, 0x1, 0x6, 0x28, 'syz1\x00', "18ee5b57d8aae3e58bf7260f140a660da9ce805cddbf1aa85fabfeb893d55bed", "97b94452221296167cdf92fd6cc75fb9248f6b199dcaaf62818da883d9d57e4a", [{0x1eaf, 0x1, {0x3, 0x1}}, {0x3, 0x7f, {0x0, 0x8}}, {0x0, 0x4, {0x1, 0x7fff}}, {0x8, 0x0, {0x2, 0x5}}, {0x35, 0xffff, {0x2, 0x29b5}}, {0xa51, 0x2, {0x1, 0x6}}, {0x6, 0x5, {0x1, 0x80000001}}, {0x4, 0xa78, {0x1, 0x9}}, {0x8000, 0x9, {0x2, 0xec47}}, {0xa00, 0x3, {0x3, 0x4}}, {0x80, 0x9, {0x1, 0x4}}, {0xffff, 0x1ff, {0x2, 0x9}}, {0xfff, 0x3f, {0x0, 0x7f}}, {0x6, 0xca, {0x0, 0x7}}, {0x5, 0xc2a, {0x3, 0x3f}}, {0x7, 0xffff, {0x3, 0x7}}, {0xfff9, 0x8f, {0x2, 0x3}}, {0x1, 0x6, {0x3, 0x2}}, {0x8, 0x4, {0x1, 0x80}}, {0x8000, 0x4, {0x1, 0x1a7}}, {0x1, 0x9, {0x0, 0x1000}}, {0x9, 0x9, {0x0, 0x9}}, {0x401, 0x3f, {0x0, 0x4}}, {0x5, 0xce, {0x2, 0x200}}, {0xff, 0x7, {0x1, 0x80000000}}, {0x5, 0x200, {0x3, 0x7}}, {0x1ff, 0xf96, {0x0, 0x9}}, {0x101, 0x7fff, {0x3, 0x6}}, {0x3e30, 0x1, {0x3, 0x8}}, {0x5, 0x3, {0x3, 0x4}}, {0x81, 0x2, {0x3, 0x10000}}, {0x7, 0xf0, {0x0, 0x5}}, {0x200, 0x7, {0x3, 0x9}}, {0x2, 0x78, {0x0, 0xfff}}, {0x0, 0x2678}, {0xeb6, 0x45f, {0x1, 0x7}}, {0x0, 0x4, {0x1, 0x7fffffff}}, {0x8, 0x1ff, {0x0, 0x4}}, {0xfffc, 0x0, {0x2, 0x7fffffff}}, {0x0, 0xff, {0x2, 0x9000}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4001}, 0x20008080) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000000540)=""/168, 0xa8) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:04 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) 21:47:05 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x50690100000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:05 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:05 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xa0730000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:05 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) [ 1647.576210][T19695] binder: 19693:19695 ioctl c0306201 20000540 returned -14 [ 1647.848880][T19718] binder: 19717:19718 ioctl c0306201 20000540 returned -14 21:47:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000040)) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000100)={0xc52, 0xaa, "86618e9950334f6facf91ef762d64a3947784a8499d87b01301537b6048d75c372dc933c299cb073fa495b972170b8a15e6fa7f347d26e679f7bb36c29b8b020792651e4bace9c03bcc8cbdd45ffe8127fdf05cbd939ce58d550233599663f063652927b0402001992adff0b677d18fede06458fb350fd891ff6e18f6170eb4c7ccd7adb58d985329d10d0a1b05cb6d444890b2c7301359d472fb390060b594ed59332ac22287b9a903f"}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:47:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xb0530000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r6, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r7, &(0x7f0000000040)={'syz1\x00'}, 0x45c) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, r1, r5, r3, r6, r0, r7], 0x7) read(r1, &(0x7f0000000240)=""/163, 0xa3) r8 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:06 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:06 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) 21:47:06 executing program 0: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r0, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r0, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000005c80)={0x0, @l2={0x1f, 0xef, @fixed={[], 0x11}, 0x9}, @xdp={0x2c, 0x5, r0, 0x3f}, @l2={0x1f, 0x9, @fixed={[], 0x11}, 0x0, 0x2}, 0x5ce, 0x0, 0x0, 0x0, 0xc57, &(0x7f0000005c40)='vcan0\x00', 0x3, 0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x4, 0xfffff801}, &(0x7f0000000040)=0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002900)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000240)=@raw=[@ldst={0x2, 0x0, 0x3, 0x0, 0x5, 0x30, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x40}, @func, @exit, @exit, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @alu={0x0, 0x1, 0xd, 0x7, 0x7, 0x30, 0x10}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xd5, &(0x7f00000002c0)=""/213, 0x41100, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000005e00)={r3, 0x10, &(0x7f0000005dc0)={&(0x7f0000005d80)=""/26, 0x1a, r5}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000005e40)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x462, 0x0, 0x0, 0x0, 0x2da4}, [@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x6c}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x0, 0xc, 0x0, 0x4, 0x80, 0x8}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x3c, &(0x7f00000000c0)=""/60, 0x41100, 0x5, [], r1, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000005d00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000005d40)={0x2, 0x3, 0x2, 0x7ac}, 0x10, r6, r8}, 0x78) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1648.054302][T19727] binder: 19725:19727 ioctl c0306201 20000540 returned -14 [ 1649.175919][T19813] binder: 19806:19813 ioctl c0306201 20000540 returned -14 21:47:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x100000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {0x4}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r2 = fcntl$getown(r1, 0x9) ptrace$peek(0x1, r2, &(0x7f0000000040)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000540)=""/168, 0xa8) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:06 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes128, 0x8, "2bf1166d4ace4e29"}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2c8407e6f81e6303}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x8440) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r5) keyctl$clear(0x7, r5) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r6, 0x2}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={r6, 0x1}) 21:47:06 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) [ 1649.424023][T19849] binder: 19842:19849 ioctl c0306201 20000540 returned -14 21:47:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x200000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:07 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x7fffffff, [[0x10001, 0x8, 0xffff0000, 0x7, 0x9, 0x8, 0x7, 0xffff], [0x0, 0x8, 0x20, 0x1c, 0x7ff, 0x81, 0x10000, 0x3], [0x6, 0xfff, 0x7, 0x3, 0x9, 0x1ff, 0x7, 0x829]], [], [{0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0xfffffff8, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x1}, {0x6d11, 0x30, 0x1, 0x0, 0x1, 0x1}, {0x6, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x3ff, 0x10001, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9, 0xb4c2, 0x1, 0x1, 0x1}, {0xfff, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x8000, 0x1}, {0x401, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x0, 0x1}], [], 0xef7}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000002c0)={0x400}) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) [ 1649.634860][T19869] binder: 19864:19869 ioctl c0306201 20000540 returned -14 21:47:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001deffffffffff000000000000000093f7e7ec700000000000000a"], 0x28}}, 0x0) 21:47:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x100, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000004c0)=ANY=[]}, 0x1, 0x0, 0x0, 0x4004001}, 0x40084) 21:47:07 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x6) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) 21:47:07 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) accept4(r6, 0x0, 0x0, 0x0) 21:47:07 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x300000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x68, 0x14, 0x2, 0x70bd26, 0x25dfdbfd, {0xa, 0x8, 0xa, 0xfe, r5}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x37}}, @IFA_LOCAL={0x14, 0x2, @private2}, @IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:47:07 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x20) getsockname(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x18, r4, 0xf07, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x34c, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x28}, 0x3836}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x600}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffd68}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x44}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xea58}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ab0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x273f93b2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x49}]}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x34c}}, 0x20080040) [ 1650.048866][T19905] binder: 19903:19905 ioctl c0306201 20000540 returned -14 21:47:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x400000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:07 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) 21:47:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/raw6\x00') write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000140)={0x30, 0x4, 0x0, {0x6, 0x7f, 0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r4, r8}}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:47:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x500000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1650.258589][T19940] binder: 19939:19940 ioctl c0306201 20000540 returned -14 21:47:07 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) [ 1650.450654][T19956] binder: 19952:19956 ioctl c0306201 20000540 returned -14 21:47:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x600000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:08 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) 21:47:08 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x8200, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x10}}, 0x3c}}, 0x0) 21:47:08 executing program 2: add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000001c0)={0x16, 0x32, 0xc, 0x1d, 0xb, 0x7cc, 0x5, 0xab}) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x401, 0x200, 0x8, 0x9}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r5) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r5, &(0x7f0000000540)=""/168, 0xa8) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000180)={0x3, &(0x7f00000000c0)="5ad8cdeb483326a8a44d5d5e2bc48a94cfa9b64831ece96489292234e88196c944cf28072b8f16a12b4802958e36a278576502c6b13a909f6f7e03d094cc24e1c2bc892d95b7ab40b284cae05101003450263fc55aeaecac4a456c9d16e9554356678d519a467c27a7387529d83de8f57fb9db614c480f5b98ae443fa78d59fe3c"}) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x9, &(0x7f0000000a80)={&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1650.790404][T19991] binder: 19987:19991 ioctl c0306201 20000540 returned -14 21:47:08 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:47:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x700000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:08 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) socket$inet6(0xa, 0x40000080806, 0x0) 21:47:08 executing program 2: add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:08 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:47:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x800000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1651.078799][T20021] binder: 20019:20021 ioctl c0306201 20000540 returned -14 21:47:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 21:47:08 executing program 2: add_key$user(0x0, &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:08 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) 21:47:08 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) [ 1651.311435][T20042] binder: 20041:20042 ioctl c0306201 20000540 returned -14 21:47:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x2000000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1651.521781][T20066] binder: 20065:20066 ioctl c0306201 20000540 returned -14 21:47:09 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f00000000c0)={0xf, 0x2, 0x6, 0x0, r4}) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000300)={0x1, 0x2, 0x1000, 0xf1, &(0x7f0000000100)="2696cb4757ae465a7295c4cb2754375514d16d542258a7986e75addf1b451d9c8fb6e3e24817051f4e2d2ffd881539d1d2738961434e4dbe9024123136b244195d9a493fee5b5eb1c6d491e9cdfe5642236ddc332b2a058dd640017ea9391b0f7cb0ba7b9a9e4845231d1df28c44a72a9c266f9e3bbfda09c3cdc894f1e0cb0b10a0845865e22b41946a324f7a7b7cdb87c6419bbfb0c6dc3ea468e5cc1d7082ae9f5cb69b71c99b7c3d270c41122d240189518cfa4e4fe65ca5f7d0722dd9d6b5a7ff62fdd8342819a162a04422cfaefe0df3400d72ee9a6b41dbff89e22a732b7969afd91e4ef3665164d4a3dcd99859", 0xac, 0x0, &(0x7f0000000240)="06748c0265c9fe9947d4dc56ae37ac5ee8f9ab8eb7ab30d6d34a829f279b6f57ddb0edf13c29329f03d6940b61d85e80da10257ab4c0741a9dd8b7926d7d03c6f7d586196840c95fd688fc9d515dcf4a4423d078b49dde029f6c7af914588b694b10b4f7c5849685d3d81ce3ef3c7423a63a96935e7ceb0a651c706252cf644a76d3b761d8b03c7f5e9af99ac344931cdc6bd060fdb024351b2269ebe02ee1afb7849bd78c6d86181a73e641"}) listen(r0, 0x400000001ffffffd) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x210, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb4, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7049b2c5}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ab89d9e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26d66eee}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66f22565}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x815d26a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48bee21c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22970e70}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70f8673e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b0fc27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x249a3a56}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc1fe3df}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18e70a75}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x53}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x31ce4fb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37abba21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c1f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8683}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4354e1e9}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34d5c0fd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40b8245}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1dcc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5823982d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f16}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2eda}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x79d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadd1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7663}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2ca03a90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2e7e6e3e}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4314ecb7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd011}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a12a511}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaabd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57c3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7f63bd58}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x665}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3cdd41d6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x165d8238}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc907}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1c730bea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b5a79c3}]}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x24000804}, 0x20040885) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r8, 0x54a2) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:47:09 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 21:47:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x3f00000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000001000a140000001000010000000000000000000000000a"], 0x28}}, 0x0) 21:47:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1e}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x891}, 0x400c042) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$rfkill(r6, &(0x7f00000000c0), 0xfffffffffffffe8a) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x20000, 0x0) ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000040)={0x97e}) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14080000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x11) [ 1651.773022][T20077] binder: 20074:20077 ioctl c0306201 20000540 returned -14 21:47:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4800000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:09 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000580)={0x17, 0x58, &(0x7f0000000ac0)="d61901485877d149878a4751014cbd854a92cfb7763120e377ec03b4468692c96cb0d79116645af2cac9354e1a92475fcb027e12f20200d02caf09c7eb562ff8ae4b1367c36536ebda9a02710c16641e5995922d1cebdf66"}) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000004c0)={'filter\x00'}, &(0x7f00000005c0)=0x54) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRESDEC=r1]) 21:47:09 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:47:09 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x402000, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x100}, 0x4) mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r0, 0x10000) [ 1652.011398][T20101] binder: 20099:20101 ioctl c0306201 20000540 returned -14 21:47:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x4c00000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:09 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:09 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x521481, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r2, 0x4) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:47:09 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:47:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1400000010000100000000000000314a73fd25a9"], 0x28}}, 0x0) 21:47:09 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x16}, 0x7f}}}, 0x84) [ 1652.252460][T20119] binder: 20118:20119 ioctl c0306201 20000540 returned -14 21:47:09 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:47:10 executing program 4: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6000000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x10) 21:47:10 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:10 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) [ 1652.632478][T20156] binder: 20155:20156 ioctl c0306201 20000540 returned -14 21:47:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6800000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1652.816892][T20177] binder: 20176:20177 ioctl c0306201 20000540 returned -14 21:47:10 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:10 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) read(r2, &(0x7f0000000b00)=""/169, 0xa9) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:10 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xc}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x80d4) listen(r0, 0x400000001ffffffd) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000010000000000000000000000001f70bea1abec848edf5222d9a1cfccc0759532ba8a34b9aa94a47f2bb30ea3d951c7aff9f20528db03270295a8843e12f6ed46766a090006ec4048e3da89090deeb55fd527c92abbf2755c937112bec797ff609a057e02f164d21b93d3079bbb98ee2a5561b9a7c46ed36455ceb970382d28c7000c0fb8a6ed9f108ecc63b7c0d7d0022ce5e64d377e4f97aa26548c17455a2743e2"], 0x28}}, 0x0) 21:47:10 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x40002, 0x0) 21:47:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x6c00000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:10 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[]}, 0x1, 0x0, 0x0, 0x4}, 0x0) 21:47:10 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001000000000000000000000000000000a"], 0x28}}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x222580) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 21:47:10 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) 21:47:10 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1653.303361][T20203] binder: 20196:20203 ioctl c0306201 20000540 returned -14 21:47:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7400000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:10 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000340)) 21:47:10 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x4040090}, 0x0) 21:47:11 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendto$unix(r1, &(0x7f0000000240)="01062eaf8ac57c50cf91577c8645ed3401dac847e07cf1f821fcee54d42b277036af27d2ab5e2df32448902cf401aa13f2a995c0967da480005f060b4af849200905acb3297df6fbb2388eac65116287439b7359738bd49bc5c4f851939a59f5795f4c14120753a811a78f3930fc82daefbe87d2214928215d4df9a1c3517800faeeb69eb851501fd49e91b454c270d24ba19f79dbc1af67b5c88ef504e8eb0f085d8a07e9bcbb8f9c5b4985120b20a176217d4e6ce11d435c122f671f54290a99889b41f9119872e6a5eb8257f5ec23456b5558dc47781a182aceaa", 0xdc, 0x8800, &(0x7f0000000180)=@file={0xb73efbbaa36023a7, './file0\x00'}, 0x6e) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) 21:47:11 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1653.562563][T20234] binder: 20230:20234 ioctl c0306201 20000540 returned -14 21:47:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x7a00000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1653.757835][T20248] binder: 20247:20248 ioctl c0306201 20000540 returned -14 21:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000040)="dd285b66e7ab743831cf97ec872510f64cc6c63c7e9abddb7869414b83ca14616f63b1268b756e8b", 0x28) r3 = dup2(r0, r2) write$uinput_user_dev(r3, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:11 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:11 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$key(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x2, 0x10, 0x49, 0x2, 0x20b, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_sec_ctx={0x201, 0x18, 0x3f, 0x9, 0x1000, "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"}, @sadb_x_policy={0x8, 0x12, 0x1, 0x3, 0x0, 0x6e6bb2, 0x1, {0x6, 0x3c, 0x4, 0x81, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@mcast1}}]}, 0x1058}}, 0x1) 21:47:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xff00000000000000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1654.215059][T20260] binder: 20258:20260 ioctl c0306201 20000540 returned -14 21:47:11 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:11 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$vhost_msg_v2(r1, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000040)=""/183, 0xb7, &(0x7f0000000100)=""/7, 0x1, 0x1}}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='memory.current\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 21:47:11 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000340)) 21:47:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000040)=""/180, 0xb4) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xffefffffff7f0000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1654.495368][T20284] binder: 20282:20284 ioctl c0306201 20000540 returned -14 21:47:12 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0xffffffffff600000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='dctcp-reno\x00', 0xb) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:12 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1654.844324][T20309] binder: 20308:20309 ioctl c0306201 20000540 returned -14 21:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0xea60}}) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000dcad0ee6129ed26d22077feed270d19276d96e806e28bb3fc42b353ff589bac306cbbc1a34bf261279065e77c184edf7bfc73e187825fe60066ad8f0c07aafa0cf84c7c50cdbac3c37c5cbadd9bd4a0e94a38a9ae094933e8b175daf4a2ed90baa64be144d59ccaeb8afab4f3cfda5c08ba040fa0593c82620ca27a25ad7a40f995074b4af3ebb92db710734264ffb8d9cc7a638d2cd719df120a17cc0f9d19229257ac0ce4c7923d00a04fdf7"], 0x3}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 21:47:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:12 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1655.137251][T20332] binder: 20331:20332 ioctl c0306201 20000540 returned -14 21:47:12 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, 0x0, 0x0, &(0x7f0000000340)) 21:47:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x2}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:12 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) [ 1655.394855][T20349] binder: 20348:20349 ioctl c0306201 20000540 returned -14 21:47:13 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 21:47:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x3}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:13 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1655.674757][T20368] binder: 20367:20368 ioctl c0306201 20000540 returned -14 21:47:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x4}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:13 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:13 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000b00)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r2, r3) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000540)=""/168, 0xa8) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1655.957883][T20388] binder: 20387:20388 ioctl c0306201 20000540 returned -14 21:47:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x5}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:13 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}], 0x1, &(0x7f0000000340)) 21:47:13 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1656.234970][T20409] binder: 20406:20409 ioctl c0306201 20000540 returned -14 21:47:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_TSS_ADDR(r5, 0xae47, 0x0) syz_extract_tcp_res(&(0x7f00000004c0), 0x3, 0x5bfb3f37) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) read(r3, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000004374884436886b7aac96a50d623dfa7eed5146151c29f11d04686b5e5aafd6f4e0c2a97a52393b8b024ea4ddddaf5a909eb17aecdde5f9e60da461039d39d5937d6e930f4e6914a9c7dd524c8efc74e39b3ac63c0ba17d93abc45a2bcd213f1fe0a71f99cea5215f9113a995e379c3e0128f59fa1ff0cdf31a4685ec9db25ca5d2acfc14b042f2e6b67b3cdb2c086d3b75bcdddb530f12e77417575ab8892e93d890279af8262446a7e04ebb0b46fb7ebc9bf117c747847fa8c4bc365e0667f10bcf7a79acf1a622c56d9df07504f1fc56eb5a7b9fb116c8ff6272d31b", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x3}}, 0x0) 21:47:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x6}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:13 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1656.557831][T20434] binder: 20433:20434 ioctl c0306201 20000540 returned -14 21:47:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x7}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:14 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@ipv4={[], [], @remote}, @mcast2, @remote, 0x3ff, 0x0, 0x59, 0x500, 0x9d9, 0x4200002, r5}) [ 1656.813703][T20454] binder: 20452:20454 ioctl c0306201 20000540 returned -14 21:47:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x8}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:14 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:14 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)) [ 1657.115092][T20477] binder: 20474:20477 ioctl c0306201 20000540 returned -14 21:47:14 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x48}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1657.384874][T20500] binder: 20496:20500 ioctl c0306201 20000540 returned -14 21:47:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x4c}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1657.646236][T20523] binder: 20522:20523 ioctl c0306201 20000540 returned -14 21:47:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x60}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ppoll(&(0x7f0000000040)=[{r3, 0x8029}, {0xffffffffffffffff, 0x10}, {r0, 0x22}, {r4, 0x100}], 0x4, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={[0x100]}, 0x8) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1657.885666][T20538] binder: 20537:20538 ioctl c0306201 20000540 returned -14 21:47:15 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)) 21:47:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x68}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000]}, 0x45c) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[]}}, 0x0) [ 1658.146268][T20562] binder: 20559:20562 ioctl c0306201 20000540 returned -14 21:47:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x6c}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1658.452625][T20583] binder: 20581:20583 ioctl c0306201 20000540 returned -14 21:47:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x74}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1658.708031][T20603] binder: 20597:20603 ioctl c0306201 20000540 returned -14 21:47:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x7a}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:16 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)) [ 1658.953967][T20614] binder: 20612:20614 ioctl c0306201 20000540 returned -14 21:47:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x300}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1659.229528][T20637] binder: 20635:20637 ioctl c0306201 20000540 returned -14 21:47:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200), 0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000001b00)={0x0, @in6={{0xa, 0x4e23, 0x401, @remote, 0x1}}}, &(0x7f0000000940)=0x84) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000002180)={r7, 0x2}, &(0x7f00000021c0)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00', 0x7f}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000080)="d5cf50c6cbd17a5962bdd77f04d37ad23b705c8189a1671d8855fe8b8541356abb6ddeddc9c0dd78b3bd9da9ccd1667d4a6ca5320f58dad7d05f76c37fe9a8e7fb67078371c24e79d52420865feedefca5490e8529de83b313c710cd68e00f14acd0388e83ba85000d4063e21c489b33b5a9bda8bb0b841bb1b88da785bc83b257da870428125e4e7d9f232f1c3eac0d96aa70f918c55ead64ddcb6902115b55cd3ea58f976a98fbae7f33c4f5", 0xad}, {&(0x7f0000000140)="5cf1fbbb3060778c8fc9cd35fcf6805b074f224e7bfe2683ba5fd08fc0c8c9705df5572063c5d108ede37075fe05c1673907402a54eae4d1e48c82483a40e7e985a264e97f71bdc39156c69db21d483e92c7a040f9f585fa909541df784af68f120136bb3edfea5f6c4ede4c370dd0f54717c6337d1b71712b91deceaa0a727fbe65fa1a7fcab39e4c1d0abb9784596267874950ac76cec39a41424e6f4ad4833ea4f92d5f75f6d2d06727c484b3e50ecd0da6f2f8b2034c70e8ef3901dabedbd39581cfdf0f79d7ddac989c4c5bd841cd94fee7d2fd87cc569ee0c0d5df58853d20af8df63ae4f5428ebdcb8a22d85544", 0xf1}, {&(0x7f0000000240)="fca171a9e3ac5c0105ccd59e5c0c4c2c4ed781832a380b2dd397d3b7d9ead888d8b78710daf5d2a02589bca05ce4500b869b25f7b20d5222bcc0fd2d84e6f34ffb283a34fa5829c243b07f67622157570c6109c0708caf78998ba9f94ff9a75d7314048b5139ba88a6103052a155a0089c6d937db076d277ecd0591890eea64e9f049774cd58f0b5e0437ac545ead3055f76e9da319bbfae1e0bc233be9ee699cd2df660f46c618869fba0566fbd80547ffc86a0", 0xb4}, {&(0x7f0000000300)="1498f1f7a9528f6ac4ffd9ce598fa8e72c98fe85217f2a8f2f9460d08ca26e74747b37447a49b1734b8fbd882d957b55646eb3d823ad72c60e40acd5582ccc625faa7dc654ec44a3205045", 0x4b}, {&(0x7f0000000380)="63151db9681f7e9f52ab1a9380558571f379c5e215e1826e95", 0x19}, {&(0x7f00000003c0)="d4d78fc38d1a27766fca8961979293935dd238c8689c575ca93b137ae3e9781ee4e9a297d53c6e6168cd94d8f5df0b155ad69e11c5c22cd49f064ca507b1efc2a55cb740a351a5cabe7c06eb4ab5d8beeba094541e6eb77f276c38a2c3a31c06c2f04ddd81069340b640b70de80e0a14700d84573dcdeebaa2abb3cc851528ef4348cd67b4e4faef06f547d62387650b8bf187b7bb0913a5b239331d10fd7a4905f7173679e7c45f8e8009ab894aa9a4e9393aa86ef41e3968f4cd38465d0c4b06d1fb1d813c1f7fedb603df43ccf215435cd44b9f37ede8c71540aaf7c372850e6f6f996e1ad1", 0xe7}, {&(0x7f00000004c0)="05", 0x1}, {&(0x7f0000000600)="039646178421402799d19f77ed8b4545a3cc97cdc56e602d7b9fa1f1b417f0647adf61acb53c5c2a67834fb0971e607e64901a2a29d7a9287236b52e78342970e0b302d92c3155a1c6913abe11bac8aadcad8704ba4a6ec7c7f8aa3d6358f23400c6432887ef4bd1243c9e7656f0c3d28d8f", 0x72}], 0x8, 0x0, 0x0, 0x851}, {&(0x7f0000000500)=@in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffcd4a}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000700)="42c17144b023d604da88be189ae8dc83a88d08f0d494", 0x16}, {&(0x7f0000000740)="f751d7e9ae3b5e07939823d562b32d39b8", 0x11}, {&(0x7f0000000780)="8234e00397dc305b2a422175a1c6dd99200ba45041ac27a0e8891d85fe2b4b436f0bafa777e583b3c2a129549463aa71dd649fa62c086cc09756c0f6171b75da039c236f34e3d5a8b2e41b3a668a3bf437688f413092c0981a5c725e0ae46ebe11667356f53908d3f0fc091bbdd84ac02666bbf38f46725b2fb1b85e6465e23e5c020c75adc433aaddda2cabf8f3c21bd49dd3ec140a7348930627d7ed835766eb627ec4e2267e1b3d7b4f42ab066bec0fa1ce5279989f052b20d2bbba", 0xbd}, {&(0x7f0000000840)="6509edb6cd9fadd5b1a687af1486139fc7e7b0445cabbbf73b029feb8ef6563fe61aa36b602f28c3d7900ea79d2cda1e5cd82a6029949b318ad570b4f9065ceb5abbc0b5446186de770d67fabf", 0x4d}, {&(0x7f0000000b00)="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", 0x1000}], 0x5, &(0x7f0000001bc0)=[@authinfo={0x18, 0x84, 0x6, {0x800}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x200, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x5, 0xffffff01, 0x400, r3}}], 0x58, 0x40}, {&(0x7f0000000980)=@in6={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, [], 0x3}}, 0x1c, &(0x7f0000002040)=[{&(0x7f0000001c40)="51347a201106444c72770b00d1bac0f59021deb8b970d4c83753008f4f3f4ffefc0ffabaf43f43606c208100b07a0e128907038deb0f9d4f814b42062d7634b3c2c694a01901", 0x46}, {&(0x7f0000001cc0)="ff8711b9da60fe1d37bd3a8578c50c91a82b2b7da224dd30aac865257fc9b6b15ea517c44486705e171a3e476ef848a4523a86c539561def52bec1511f4b8e369bac718380f5e38ee31bfbff8a5e48be", 0x50}, {&(0x7f0000000a40)="434f16750684cc711f0462d89d3fe6afd38ab8e78b5344b2cbe2", 0x1a}, {&(0x7f0000001d40)="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", 0xfc}, {&(0x7f0000001e40)="63a4ed0b31fd3dc035dc24f1729bc3a33bb709e48f96478f8860cfe5ecf398ee9286102fbb61ad8fcc16e668ab9c354cca3f3373377f95200f55ade65374abc230073354c006957dd3508f92a34c40f7a4c173dd586946d48345f89f765cb7f638425c80ec2d1798cdf8f1603d96e31b1c72c2993c67ac254d615a6bc879e0d115094db3068ced299907bf5bcde75beadeafae3563a8216ebb262f4f3a08b6d8a9255883ed5678bb1af65ff5abd70cae5d752fd006a8e7fdb3518e4500063e642f4dfe4ba5f69e90eec3e7108ffd420a2b3ca588be07f0016c0330fd498108b077e0", 0xe2}, {&(0x7f0000001f40)="74e6303d38aaa7054a511114bd0060f9cc6a234e86455ce3d40fd2e7b3d04b2e14ad5ded218bb52ac33a734108bbb14fb86e9bd8501a6c606be468f6753ecf1de5b436e1472120053782ce893ef793b0b1443b73e811e5f309e4f441825977c34df59ba4dcc7ccebb64d480216b607df78ed20d018035a75ea063ddd99c77cd1137b2d9c754747d6c2eaa848097e50d8ab45582c1f7f0a471ec668d54ad1ce954a90fa7f739fb37ee60205ec350e4b84a4ae70b67fcccaa66217ffb65124c32a77ac18ae72628eb63050e1190734c0f9657e", 0xd2}], 0x6, 0x0, 0x0, 0x24000080}, {&(0x7f00000020c0)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002140)=[{&(0x7f0000002100)="dd9d386a94303a34e3be028b7fa6b2cf", 0x10}], 0x1, &(0x7f0000002200)=[@sndrcv={0x30, 0x84, 0x1, {0x800, 0x7, 0x820b, 0x5, 0xb3, 0x8, 0xe40, 0x3, r8}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @prinfo={0x18, 0x84, 0x5, {0x70, 0x48}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x21}}], 0x98, 0x4000000}, {&(0x7f00000022c0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002300)="b7c183dd8d05c5d1cc48e3a6ecbca4b60bcae2d6b7ff5531225c59b3f825a2e3bf1ea76cf8a61768b81b6467304674acb227b8cc4832e945fec41df7bc76de095c450b47497cce8e3c4fb01b2e1bf9d00b7a75662c6060f3b42c5cab3e1b29642f5fa5760ae2b4aaae8a8d72c4865d9e5c46969a442f13d2ee5854217653b3bfd0b0a27e", 0x84}], 0x1, &(0x7f0000002400), 0x0, 0x8c3}], 0x5, 0x800) r9 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x500}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:16 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1659.505775][T20654] binder: 20650:20654 ioctl c0306201 20000540 returned -14 21:47:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x600}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:17 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000340)) [ 1659.835460][T20671] binder: 20670:20671 ioctl c0306201 20000540 returned -14 21:47:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x700}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1660.151230][T20699] binder: 20694:20699 ioctl c0306201 20000540 returned -14 21:47:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="14006090484c5e0b9b5b3625c84f19521e", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x2000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1660.408690][T20716] binder: 20713:20716 ioctl c0306201 20000540 returned -14 21:47:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x3f00}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) [ 1660.629460][T20734] binder: 20732:20734 ioctl c0306201 20000540 returned -14 21:47:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x4000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:18 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000340)) 21:47:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1660.826368][T20740] binder: 20739:20740 ioctl c0306201 20000540 returned -14 21:47:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x4800}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) [ 1661.018503][T20750] binder: 20749:20750 ioctl c0306201 20000540 returned -14 21:47:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x4c00}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 21:47:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x57) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r7, 0x2}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r6, 0xc010641d, &(0x7f0000000040)={r7, &(0x7f00000000c0)=""/162}) [ 1661.230203][T20761] binder: 20758:20761 ioctl c0306201 20000540 returned -14 21:47:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x6000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14972025", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8001, 0x1, 0x2}]}) [ 1661.449579][T20769] binder: 20768:20769 ioctl c0306201 20000540 returned -14 21:47:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 21:47:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x60ff}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:19 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x3, 0x1000}], 0x1, &(0x7f0000000340)) 21:47:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r4 = accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r5, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$SIOCGIFHWADDR(r8, 0x8927, &(0x7f00000001c0)) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00') ioctl$TIOCSLCKTRMIOS(r7, 0x5457, &(0x7f00000004c0)) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8810}, 0x0) flistxattr(r5, &(0x7f0000000340)=""/66, 0x42) sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r9, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) 21:47:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) [ 1661.691046][T20787] binder: 20786:20787 ioctl c0306201 20000540 returned -14 21:47:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x6800}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 21:47:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 1661.926600][T20798] binder: 20795:20798 ioctl c0306201 20000540 returned -14 21:47:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x6c00}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 1662.131497][T20806] binder: 20804:20806 ioctl c0306201 20000540 returned -14 21:47:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x7400}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1662.341919][T20812] binder: 20811:20812 ioctl c0306201 20000540 returned -14 21:47:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x7900}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:19 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) 21:47:20 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x0, 0x1000}], 0x1, &(0x7f0000000340)) [ 1662.624368][T20830] binder: 20825:20830 ioctl c0306201 20000540 returned -14 21:47:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer\x00', 0x200, 0x0) r3 = fsopen(&(0x7f0000000a40)='udf\x00', 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ed20000]}, 0x45c) sendmsg$netlink(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)={0x78, 0x2e, 0x1, 0x70bd28, 0x25dfdbff, "", [@nested={0x5c, 0x4b, 0x0, 0x1, [@generic="d32bb9d35d955eb077f54f522d76ce4771f9d2fa91d027b52cfbd8db288a1e11d819ab4bc25fb0e38b55b1dd6278ab52e00259a726f3d5f3d4a64285ed0c113bcb70171e33db0eea1c0237aed5281caa", @typed={0x8, 0x17, 0x0, 0x0, @binary="0fd6814d"}]}, @typed={0xc, 0x58, 0x0, 0x0, @u64}]}, 0x78}, {&(0x7f0000000b00)={0x1550, 0x29, 0x10, 0x70bd26, 0x25dfdbff, "", [@nested={0xce, 0x31, 0x0, 0x1, [@generic="006776bae19c9d00a61547d4f08cd6652caa60e5f5b7ce8e6bf5284f3b60be7eb040e79ebefaeddf61c6543a683fcc62b6f8f260bbf2e71cfc2f1568c6eefd798c31e57ae5c0f49167b0b926837f4fc445a5551400c45bbe3dfb3f43bbe701d74b3fcfc32262335deb194112babdda48f556501c49aace9fc48bc2a0e0f1ba08f5e1332235b2d1aee19cab8028f1f6ab1b783e68b1f0b55336b48868aca43ae56fa790ac8704b7ff434d96b5512cae677c19e37ef144924d10660be25ece91893a36cf5358c4a2708ecf"]}, @nested={0x12f8, 0x2f, 0x0, 0x1, [@generic="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", @generic="14023b20c02dcaf5e95e82b88f1b8f8a4ef014165742703caf2e0ab49846ed154dddd3569520fb15212312e9b895131b2622a59c6a43fe1859722473b54979266266d353d83d8ee6f85c99f5350908cdbb7708b109c30dea4ea49064c0598fd2517a3a1a0adc970ff9f514", @typed={0x8, 0x25, 0x0, 0x0, @u32=0x6}, @generic="2eb6e88bc6407c815af825ba96b1328064dbd670426b83ebff30c658750b3cb12490bcc92b975d02ce82ca9c3bb3d11f899864836cb518d4659ec57460b7a8635cc9d4a8781a39a8ff0f6554504bef59b7a4c3bca4f34fea5b86832bb370a6e8eaf17754c3326f5c9fea5df6755d06ba60ae1719bf2296d15bb48818013275afaf0571f8099777183edcc45564f323d01317525c735d20df81a96ec17643de8dd97c31fa0b7fa0ef1ee62cfb1a445f5f", @generic="5042ed41bddf613b7d0007157c9393d4bed9c0e157c73e9ed08b3d2406bb0c2341fe6e10a864abdb3f00cdccc97cf8a030350334787379a35ea9055073f90e10b84f3e62011ae0", @generic="15985cbfbc9edcdd9191343851aa74eff4d1bc32fd30ac56736c45170f15a9764acb8613985babf7a66e81f9d3a1ac64020c260dd2f1ac799a0bccaf374c31bad3d5c17df40cc52a19c7ae623c72c94bad92b718d3f068a56dccaa88b9f343f3fb5d9cc83ae5ef08fc1e6c2a141c41b076df15340ad0d587cccc0d75f057a5b405a250b98d37ccd5739d69ac7c648b713badd1d1c338593b824b5d1b01b460d2b668c7e40d7e608ca6fa1af06e1a2bca5770effbcfcf1ae8a5adb9fb508fb9bd2aedb3fe61891ed6a7af", @typed={0x8, 0x39, 0x0, 0x0, @fd}, @generic="25bbcfe327cd1e6f58f37c7fdbd33b3913cbd65a05f49f4d3bae0bfd56719ca56b3cacfd36e29b24c7e0e0224341370c45d2869cc90e343180655140d9e4f2b31a2f28f800cb16dfdf978d2ad1117ca6bf10f29ac5f51d54561bbe751586c36864073079fcb79a9131c8af0feef41e26ad64c3d32c643520dd82b74efdf2c77c62f032abcd601fbea44128e7f4e72f8a16f02cef90d3d8782845a4e9c8647dbc7a70d1b2befb1a8cfa57f8936a7729c2b8ecb47574ded6d3"]}, @nested={0x177, 0x36, 0x0, 0x1, [@typed={0x8, 0x49, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0x40}, @typed={0x4, 0x95}, @generic="adf73bc6fb6fcefe609b13f7905c72e3e4bfbdca178d8246b5a5891d71f29614815c3cc0d8d328e50dadb0472c2136e80d02dca6add19bd853378c59a65dcf950e6cd05967816dbe1c55bdc3c6e4f08563ec0e110570e34b92f19e2043391f70172c5f9e5aec16641ff3ff9ca20d6e092d34caf92e6b404b9cf1d89cc34e3b", @generic="1377b72fb945765eb619c9de609fe16aa394af2088f467a70b702fb6f8cd3ec6d4b4f28f972886593b7d8b865a33580045af878a0427a1dc38f3ef13a05eddd6e535fe84b96e3298103a48aaf5170aea54066c72d240809ca69e49611aa63e262268b71b0551e57871fedf14771800dfd318c52eb6f54efb578f30e9b9a29869ab", @generic="40b79879743e85cccc0e64b7d1e9979115a42c1aec722c4572c46e193722b435b64a2d886bcf7b9ce0f0f263a3a9c79b9833f90bf034c1092271d6e39ff4d9ec1db31dfbd05d3137d3e812392bc00ab00f831f73f1a3b029e3b9fa6348c33079efda92"]}]}, 0x1550}, {&(0x7f0000002080)={0x115c, 0x1e, 0x100, 0x70bd2c, 0x25dfdbfe, "", [@generic="dcf7992599a2f751d52433257e33b2c8e1a0", @typed={0x8, 0x3c, 0x0, 0x0, @u32=0x80}, @nested={0xea, 0x51, 0x0, 0x1, [@generic="17f2beb65877a78e56d39cd08fb5811e428704586f5859dade17b93b8d4f55f7ce9a9866c5c30bd9e9f3828875bf4779cd6d582d6a2a6845f06fa7f13e57fc9a37c3bb0ced6329744a28a7b36e5e98b02be4ec684885b9c2da2cafbf6ba9bac64c8a4ac3db76a67a2e69fc3ada6b1210320a071b054311af11f642b35c8d3511d2ec6ee01ca6dad2b0e75491d181aaf4a06e58fb9cb681e04eff2630d9ae701e326b8100230dc779b72d6051b3c0a57f1c2c15ad0710df377bbb2c00e5af53b691e6fcf30fc32e3cbb2ee7913454f926e4f3eea808fdc7e440d81f77809a14efe35d69dc425b"]}, @generic="ac2c33dfe4c8c4298253e95455d6218de1358e23b54dcc5a683a749ff0ecf4a50d27", @nested={0x1022, 0x60, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@multicast2}, @generic="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", @generic="c80df33e81aa8d582191e15fac4c4ab2d23044fd79df"]}]}, 0x115c}, {&(0x7f00000000c0)={0x40c, 0x2f, 0x1, 0x70bd2d, 0x25dfdbff, "", [@nested={0x106, 0x2b, 0x0, 0x1, [@generic="d3892f01cb28645241de3c6a57619b03316982f1978555c1025e885981744fa3734d02beec85e9faf0958db51c9c0ea900993a73468e83d1f4d72e74414266d9097655aa65577845e639ce112e180ae9b3bbeb942f625b241f0c68ac030ff5cf802bc60b01e0e8386193143abfca299aa3c37cb31660a7b55ca61ead02da64b6f0e6de52deca1521b8970960a67aba7baf855b18aefb474f1dd267587a3321d05af08146c1faf3c5bd693ccd42ff20995b9903e8fb2b307f4481fa28727656af77", @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@remote}, @generic="dd6018c6f7d3529bc5e08c6eb65861eb57876a949bcb172b440a1f825ea0cd245528d7e3deffec458e747db3492cb642effbff598a", @typed={0x4, 0xa}]}, @typed={0x22, 0x21, 0x0, 0x0, @binary="bebbfacf1a7791a735e3a9993eb73c9db76de77a1a6f63be49b559f977ce"}, @nested={0x10, 0x30, 0x0, 0x1, [@typed={0xc, 0x7f, 0x0, 0x0, @u64=0x2}]}, @typed={0x10, 0x14, 0x0, 0x0, @str='/dev/uinput\x00'}, @nested={0x288, 0x5d, 0x0, 0x1, [@generic="88bb67d3964d5462165957cffe045d6526bba7a5e5e591c9f269cfad6d57d07c778d6a82e54d4a1db52f66f8fd783aba72520caa1aead980779ff25748bf49a47e3e3204226e68e21a306fdc1878022cd32646f6122e007c46082310266393c4863b7f70a0c55e5382cacbb04206444e5e48e6f12a25752cb15eb1d55efd0c627cc9f9327bcb4064566b375c9ccee580f6d538b982cc2ae0bfb0fdc95c7fc3d384ca225f80bebf77595fc9646bef46e03c4b98d5e78086ca7774d3617d1334e1bc09afce9f580be2feaf17440671592c655be0f370675f54e184f1324f75cb009d0533b74823ec9a4c2c83be8c", @generic="5bb88abb7df7efa6fc3c2ac9bd76f5da6255448052b526b949c7c2df775ab615de1e481df0335bfe63af93ca168d872f59feea1ce6284c6ad369bf7912c5d01562b15c7cb1fe5834d1711a", @typed={0xc, 0x13, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@multicast1}, @generic="ddac22f3791fb8887a45f3f8ec93b76c2ce776eff179b47c1e45e0161b80da020825e35e3d4d936b30b03f6b5d464587a2dff79759f1d21fe605c7747aebd9c0f06e2058c7fe64c477d0612bf822d95852323590903dba52f4bd00ef8fe4f554ba77905c3e42e2a61dd7078b40e17222fede68fd482b5f26c728322d40252f382686fa23065d", @typed={0x87, 0x69, 0x0, 0x0, @binary="4bbc24451b0c3378fe383ed2bd0c8f0692a6c022ba315e6fc643cf8f0d64b836f9e435089d0f45ffdebe0af2c371b7af3cf9e6bd745e93774194be4782a3ea90f9df97fb758757fbae98c0a1eebe9029c9ce0be0aa63b4d7f2cf54c92bdba9970b9b40bfcb1b004ffb8fc5005968212e3aca7415313d6de5e9b9184faf5bdeadab2751"}, @generic="d98ab685213bda54cebf6df142e6a12b2d613935096801235c99f8bfe578dbcb2944ddbee57afa27b6e1"]}, @nested={0x14, 0x6d, 0x0, 0x1, [@typed={0xf, 0x19, 0x0, 0x0, @str='SMC_PNETID\x00'}]}, @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@local}]}, 0x40c}, {&(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x94}, {&(0x7f0000000500)={0x18, 0x17, 0x100, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x8b, 0x0, 0x0, @uid}]}, 0x18}, {&(0x7f00000006c0)={0xa4, 0x29, 0x5, 0x70bd26, 0x25dfdbfb, "", [@generic="1d3d5eae3e0a2792f6e62b898c050b6fffa9b52b0439422a78c29e7a0f6571f661600d4014ac788f3230563473e89442ce6c821350ba9549de3c65747266c6f95d137c62335062215dfdbc0932da750fff3e48c324b3b4558aa5b2a66ead33d2a786b34fd4dda23b0470dcd57e29a22845ce5ebeeafd214cac218c73decaeca488d0370e2eace7c58467ce3ac37abf7952"]}, 0xa4}, {&(0x7f0000003740)=ANY=[@ANYBLOB="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"], 0xcc}, {&(0x7f0000003200)={0xac, 0x40, 0x200, 0x70bd29, 0x25dfdbff, "", [@generic="010461d4abb193256afd0651af14b2392587f153f276ff616e76552a44f44da04c18708ef5aec9bf13bfbb0a78a28866434a558820298920c847339acb6e7ed4e03959ffafdf2128c961fabd3ca724f7fe7f499a7345267c8537ae845d609009cc719a0d0188224f84e21aee0f563eca2b83d53cd39294618c26fa6d6a32a46d805a65d1e42f9b2c90e1766979b2d0535242", @typed={0x8, 0xe, 0x0, 0x0, @uid}]}, 0xac}, {&(0x7f00000032c0)={0x274, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x262, 0x2d, 0x0, 0x1, [@typed={0x14, 0x75, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@local}, @generic="bbee3668bfb6767dff28fa3185205dfbb3d4cf7122cef423625f91b5e46e9b79fd4599733966ee7a12970699e4ad95411ddcdd93c92a42881de06bcb2cf3623b058a68368c868790f676159307540c6cd003d2da9c2abba6bdc1ceeaa39ce743b3d4720c166f21ea74c47e680f60e17c0487a4b6f53eb830", @generic="1c0fe0dda30e8384431cd486c64f017f9adc8fbcd4b9ad3694e3dd2d405ecb4fb8e9c28fbe69844f6af656b396ee28b73b9a6052e1d10f87c450cf48980f4382b6ed2dfadfe8b2caccc0696ca22a32b521b0dc4172b85d5382e43d922cf0de2cd7e5646a2bba37", @generic="34ef6bdb56b1370c1ce1913a27ca6e4a03ef5affb7e55dfc9bf2fa94fd2fbd5dcc40d12323224a76d895e281be8a6d439708a1d87abc6ec8f0f9a484c4acd181e714d1bf871e5fdf98305812ab5fb5827d27497cd54267e00f926a33a9e955f5426a91a871e9e50f62e0e3f05af96417c0a77325b389cf2a09aacdbfdff24f6c9e2f1d7b6872620f0d9aee9563e925463bf7133d663a7dca7ed736a6487cf156415729bfee7d30dc23a099ad86250da9601edc4f702a09bba4d7f06e851bb469c31787400eab71e0b323897ca52c7462f5d6fc31626edeb720", @generic="2e6f17ce1c40e3a511cba406710f14cef7090896ecec42dffdc449823d033be0238ff8f06597f8fed40dc7047646e19534eae8bf2b77fc3c75b02aee3600c2f2f6a26aa0af0f63752bbf801cd08257a9f9cac720db43838d3a1529a7e9b53334d5d3a024ded3", @typed={0x8, 0x6d, 0x0, 0x0, @fd=r0}, @typed={0xf, 0x3, 0x0, 0x0, @str='SMC_PNETID\x00'}]}]}, 0x274}], 0xa, &(0x7f0000003600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r0, r3]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r4, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0xe0, 0x800}, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r6, &(0x7f0000000540)=""/168, 0xa8) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="81000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x6, 0xc, 0x14, 0x0, 0x1, 0xff000}, 0x20) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="fdff0000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200), 0x20) sendmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{&(0x7f0000000240)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="6a3acae5f37bc9f0d861785b0c5a83882642a09f327709685f007598fe95c8e16dc49e257a026e794ed7bafa1a5ab122c27064eb354b7270ea180b205769795609f628ece9cf804e85d2cd7858fd7c5c72e169128398d4b8ad170f6a9af85f3766e30a3b0611445ab05523c0818955c92d6568075477874b25273d975198e27fe3fcb9d28b5cc60395402e64e15bc67272eb1899c4e67ff5e590d7e689015a6f68e68741c5e2ea088b3b4efaf62cfc2e9a0333598b7a59110aa255804f53dbd6bbc32aad20121f435b453e2d3c065ee2b33a34e6237a75ece636b67f5b4be09cf0e045d728e722", 0xe7}, {&(0x7f00000013c0)="a92192", 0x3}, {&(0x7f0000001400)="c6874ea487cb02afb6b40ab6ba670d7eecbb583d9db4ef367f18440ff8b634b2498c6d8e4a07a131feff9c2ce29b4e0b7e2168f751c177a6ae82c11909178b8f3c8d02be97b54c009808410e32aa4b4c79a29824f24bbea6f882892e6ff69ae517dc6af2295d71624c9b80963ca5317db634ef582d0c41d2c9039e84ebf8a6867ae4271a441280af9a33c37c4424e48c23795ae8dc2eba6f8c52b75de48bb105", 0xa0}, {&(0x7f00000014c0)="b5932568dfefd9c42e9185b0d086c71dbc0e3ee45ce20bfe2da1ddecdbd915d8a638d701d7aac567f51c693dfaddd2182a226375e9a2baf38f7090f8ff67e19272d97e39acb47044b9c233b7fa9c395ae06091ebaa8f27", 0x57}], 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="200000001b0000009901000004000000a909d3b28d1fd45188fecc000000000068000000000000001301000097cd00001f3489ed5f2acbb51c348fb4c7fe07029e04cf3caf413cec041992403edbb0af33d1a8c7d9291993eb74886554d0f6da603b5061a47146438ac2ec3248de0420e2c25e6ef34e49c4c5f78cf1bf2d57bf56d4000000000000c8000000000000001401008700000000d9144b190aa11db28bcf86552eddd7f547a7fc886490344f9ea48897730ec75ee2bbfb1a6540851374eeb1bc521c2c0ee122b1efdaa055e2f69274f2769925001453bee451dfb87d324605fd15d5b3f78c239ee86bb12ccd86e97f71326b6046d96da2aaaf9b11e05245285310dbfc20b31ece9f82ceece2d52a1488a529e6b5d21ec7e087d03b670e448828a034666c4dc9b9e9156a1fb6ac5b8ae64f97b9a92ad52c89d70faeff89220569f58f14b3acec506216eaa17fb909b964875b0e0000000000f0000000000000000f0100003f0000009564eee847752db75ef23c3f9626ab027fdea137fed75874ca88dfce9da22ef073d3bdb2339ed90550dbf05e8899bba366fa27908d710d660f254d4861f2da2840cb9458a5b4a54216a24dd7a15769b224d7c86461882242c04995ad57dbf2f5972711c6e2056143f997660c8f9ef676c18931538fc25e8b9757a14808ad97b4c09513776192cc878e38e6ff95f1392ccde5ef4aca0d64fd55e4ba2fb59b5c1a3bedc83e36d0da59015453d64744377e71a8b01167abc5592bf10471e05dac3d6adc3994af2174047a49000000000000000000000c44fb692957ef12"], 0x240}}, {{&(0x7f0000001800)=@ethernet, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001880)="a1727acaa18ffab3fe695c71a725856b890fca5ae5397c3c705f2495686767e9ef0ddc39bdf26ac1a61549faec1e753a95425aeda5f310ccff", 0x39}], 0x1}}, {{&(0x7f0000001900)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)="604b3a4c47c5175e6c90dbda6a7df0a7a12747cd4a7df88bd62583c9283d2798e38f56f24974f69e7a808345104c50cab559191c2185e60efb4d383921e9fef82be36663db59c57a82ec3f3b8681be454fefb64bee2cc3183f223887fe31b091156ce0d2a742881c477d08b32214cd22bf550bfade494a63053a01a2d361d60595b395541bba945c5bb825302efbcd3d758de80a1bcba4c7c3543eb15c53d3", 0x9f}], 0x1, &(0x7f0000001a80)=[{0x80, 0x85a7cc2f579281c, 0x0, "ed8db66f2c3af6324073423e77f6e83d845a1ce6b84dc3da657d25c6f424ee58fbac300b4d04e29946d968872e4770c0494347017a9362da7cb648b6d85e500062119a007ef71b96eefe9c57db90f689833171c455994354d90f676bc144c27d4d9b3534f303e8a748d34d1d1b"}, {0x18, 0x11, 0x3, "153015c0abaf"}, {0xd8, 0x84, 0x9, "318df021cd6a68036051e3b27b413e8917cb4fc05eeb5fd63d96c1bba5a15e260af6f14c662b8aa73a889c795be7851a9b2f733d53a65f1c465d1c57d664365882831f7fe3df85f9a1e07b877556440115558f8ba12655fbd128b49943db67d8ac2dbb28493252d279af62828a8f9c002440ac64d4525e7814d4c5d3b5658637c400a95e2f0f0530a153ddd8807d90384c17fba2f8dad310242a4c9853b793a6c42fb8546d0a2ba36001acbd97b7135e0d8b4a4b49e4db85da9c82d8f723ef97dc23"}, {0xd0, 0x104, 0x4, "63c545d74800bfd2e8917d03705325c16b775302a0c68134edd74b538dd833d4b17163620c3db03ab4060acf95db9a396fd071514f101c3335e5452c234f685460b5284d17a30fa029ece33e3548f332e2c80503e5d34ac1a10b7f0bf3b9c2fb5a05ed987352bc09abd3bc6582a4068d21fd0ecde8e6ad6cc829cbe3e66f9a43efb9f48d4accf7161d5e60093fb12dcc512bb05e1e37da759a9d738d34f312b2916fbfcd3c888780a3cc1f920d003020c7d97e524b136c6f7c1374970013"}], 0x240}}], 0x3, 0x40000010) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @local}}, 0x1b29, 0x7}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000600000000000000010000000000000000000000000a"], 0x28}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000001c0)={0x3, 'veth0_to_batadv\x00', {}, 0x200}) 21:47:21 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r1, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x2bf1}}, 0x18) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0xc100, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x300, 0x70bd27, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000001c0)={0x2, 0x8, 0x2, 0x3}, 0x8) 21:47:21 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x0, 0x1000}], 0x1, &(0x7f0000000340)) 21:47:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x7a00}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r2, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) connect$caif(r5, &(0x7f00000004c0)=@util={0x25, "cdfc70959409693eb0b5ddfee10ec319"}, 0x18) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:21 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) [ 1663.837755][T20872] binder: 20865:20872 ioctl c0306201 20000540 returned -14 21:47:21 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x5, 0xbecc68b96733bf53, 0x0, 0x0, @adapter={0x800, 0x703e, 0x80000000, 0x8, 0x9}}]}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) accept4(r2, 0x0, &(0x7f00000004c0), 0x800) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000080)={{0x3, 0x0, @identifier="103411855a776e3240de8fe864002d44"}, 0x92, [], "899fde99a2f72881257eb6e7b4e57a075d214b648c2d8312d2b01a957d91f301efc7bb92ceb628e8477f83138a168899221ac5e9daee0a2f88c030b9d18cd1d1d5ccb3fe31f0d37205437ef8000a7979ef82177b3662365a847582af9449faf27e612e29f945925e68a7d3ed16685af0613c6c810e5feae329393295702b4bdd747c8e946b4b67bf2c31095cd11d09b534a2"}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0xd) 21:47:21 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes128, 0x8, "2bf1166d4ace4e29"}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2c8407e6f81e6303}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20044006}, 0x8440) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r5) keyctl$clear(0x7, r5) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r6, 0x2}) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000040)={r6, 0x1}) 21:47:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0xb900}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000100)={{0x81, 0x82}, 'port0\x00', 0xa0, 0x2, 0x6de2, 0x101, 0x4, 0x8, 0x2, 0x0, 0x1, 0x87}) read(r1, &(0x7f0000000040)=""/163, 0xa3) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="2107000000000800000001000000"], 0x3}}, 0x0) 21:47:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = accept4(r0, &(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x80, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{}]}, 0x320) ioctl$VT_DISALLOCATE(r1, 0x5608) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000300)={@mcast1, r5}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 21:47:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0xff00}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1664.046659][T20894] binder: 20891:20894 ioctl c0306201 20000540 returned -14 [ 1664.226538][T20913] binder: 20912:20913 ioctl c0306201 20000540 returned -14 21:47:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x306701}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:22 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x0, 0x1000}], 0x1, &(0x7f0000000340)) 21:47:22 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0x0, r6, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@empty, @in=@multicast1, 0x4e20, 0x3, 0x4e23, 0x6, 0x0, 0xa0, 0x20, 0xb0, r4, r6}, {0x1ff, 0x74dcfc8b, 0x5, 0x15a, 0x0, 0x0, 0xffffffff, 0xe625}, {0x672eb458, 0x8000, 0xa18, 0x1}, 0x80000001, 0x6e6bbb, 0x2, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d5, 0x2b}, 0x2, @in6=@loopback, 0x3507, 0x4, 0x1, 0x1, 0x8, 0xff, 0x1000}}, 0xe8) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x351400, 0x0) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x4000050) 21:47:22 executing program 1: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r6, 0x400000001ffffffd) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000140)=0x1, 0x4) r8 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r8) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x165) 21:47:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000080)={0x9f0000, 0x7b9, 0x2, r4, 0x0, &(0x7f0000000040)={0x9e0903, 0x2, [], @value=0x4}}) read(r1, &(0x7f0000000540)=""/168, 0xa8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000500)=ANY=[@ANYBLOB="24502d0e9290363c053448d860832e0a20ba264000000045d1b66820e8dd308bee332463ae117266398e0f7cdddb52", @ANYRES16=r5, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x307400}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1665.041446][T20934] binder: 20930:20934 ioctl c0306201 20000540 returned -14 21:47:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SMI(r4, 0xaeb7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYBLOB], &(0x7f00000001c0)=0xe) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_NMI(r8, 0xae9a) 21:47:22 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x14, r3, 0x721}, 0x14}}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000005) [ 1665.315268][T20957] binder: 20953:20957 ioctl c0306201 20000540 returned -14 21:47:22 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) 21:47:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="02f9ff00", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x400000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:23 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa20000, 0xfeea, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x990904, 0x1, [], @value=0x1}}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) socket$inet_smc(0x2b, 0x1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000001240)={{&(0x7f0000001140)=""/185, 0xb9}, &(0x7f0000001200), 0x20}, 0x20) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x1000, "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"}, &(0x7f0000001100)=0x1024) [ 1665.563330][T20974] binder: 20972:20974 ioctl c0306201 20000540 returned -14 21:47:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x506901}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:23 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3}], 0x1, &(0x7f0000000340)) 21:47:23 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup(r2) ioctl$SOUND_PCM_READ_BITS(r3, 0x80045005, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x400]}, 0x45c) r6 = userfaultfd(0x800) fcntl$dupfd(r5, 0x0, r6) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064c7, &(0x7f0000000200)={0x5, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x408000) write$vhci(r7, &(0x7f0000000080)=@HCI_EVENT_PKT={0x4, "04ddee88fbcd5cd32180dfa2e4053b755c5f195f3f4af3d1630c811f05f4e9c2472cc5f34ff0e062406df30c54693fbd75098da8e98903a5c1cb95b56a2fe9f074c8ae9aab900f2085c0fa7ec094d5a35c956f81f57b9de7ad488e25f2e6c6b91cc686526dcc6eb20f99fab3b31c029d543033c016ac7f7b62898823c20a977840fb106cdf127933463db619caefd02ccd93e6ecc16859e0d77a978e03bcf8edf21d66e07399c8e8d9dc97fd3840588b1ff50de10ad1d47de6f0a33d534e"}, 0xbf) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) [ 1665.800371][T20983] binder: 20982:20983 ioctl c0306201 20000540 returned -14 21:47:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x53b000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r5, 0x7fffffff}, &(0x7f0000000080)=0x8) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x73a000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1666.012752][T20996] binder: 20995:20996 ioctl c0306201 20000540 returned -14 21:47:23 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0x0, r3, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r4, 0x0, 0x202, 0x0, 0x0, 0x10000007c) stat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0xe8) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000840)={{0x0, r5, 0x0, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r8 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(0x0, r9, 0x0) write$P9_RSTATu(r1, &(0x7f0000000080)={0x65, 0x7d, 0x1, {{0x0, 0x42, 0x3, 0x7, {0x4, 0x1, 0x8}, 0x14000000, 0x800, 0xde69, 0x7, 0x0, '', 0x0, '', 0x8, 'w##nodev', 0x7, ':wlan0('}, 0xe, 'vmnet1,*system', r3, r6, r9}}, 0x65) [ 1666.239054][T21004] binder: 21002:21004 ioctl c0306201 20000540 returned -14 21:47:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="02f9ff00", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x743000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:23 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) r3 = memfd_create(&(0x7f0000000500)='+\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) dup3(r4, r3, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r6 = socket$netlink(0x10, 0x3, 0x9) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="000200000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff1}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2}}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x70}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000010) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) [ 1666.527480][T21013] binder: 21012:21013 ioctl c0306201 20000540 returned -14 21:47:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x790000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:24 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f00000004c0)={0x0, 0x1f, 0x1, @broadcast, 'batadv_slave_0\x00'}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x6) 21:47:24 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3}], 0x1, &(0x7f0000000340)) 21:47:24 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) [ 1666.796820][T21025] binder: 21022:21025 ioctl c0306201 20000540 returned -14 21:47:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0xa07300}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x20103, 0x0) r2 = userfaultfd(0x800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000180)={0x1, [0x0]}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x80a00) write$P9_RLOCK(r4, &(0x7f0000000140)={0x8, 0x35, 0x1}, 0x8) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth1_to_bond\x00', 0x2}, 0x18) read(r1, &(0x7f0000000540)=""/168, 0xa8) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000300)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '\\'}, 0x1a, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="2107000000000800000001000000"], 0x3}}, 0x0) 21:47:24 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x400, 0x7, 0x6, 0x8000, 0x2, 0x81, 0xbbf, 0x400, r2}, 0x20) 21:47:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) read(r1, &(0x7f0000000540)=""/168, 0xa8) r6 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="02f9ff00", @ANYRES16=r6, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) [ 1667.256954][T21046] binder: 21044:21046 ioctl c0306201 20000540 returned -14 21:47:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0xb05300}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1667.461896][T21052] binder: 21051:21052 ioctl c0306201 20000540 returned -14 21:47:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0xb90000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:25 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3}], 0x1, &(0x7f0000000340)) [ 1667.659723][T21057] binder: 21056:21057 ioctl c0306201 20000540 returned -14 21:47:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x1000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) read(r1, &(0x7f0000000540)=""/168, 0xa8) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x10801, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000140)=0xb1b4) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2107000000000800000001000000"], 0x14}}, 0x0) 21:47:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x1673000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1667.839273][T21064] binder: 21062:21064 ioctl c0306201 20000540 returned -14 [ 1668.022131][T21073] binder: 21072:21073 ioctl c0306201 20000540 returned -14 21:47:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) dup2(r0, r1) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r2, 0x400000001ffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000000)=0x78) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x8000, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00'}, 0x45c) write$uinput_user_dev(r5, 0x0, 0xfffffffffffffda7) read(r1, &(0x7f0000000540)=""/168, 0xa8) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[]}}, 0x20000000) 21:47:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x1695000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:25 executing program 0: prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3000}) ustat(0x1, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x401}, 0x8) 21:47:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) read(r1, &(0x7f0000000540)=""/168, 0xa8) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') 21:47:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x2000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1668.275341][T21087] binder: 21084:21087 ioctl c0306201 20000540 returned -14 [ 1668.456172][T21095] binder: 21094:21095 ioctl c0306201 20000540 returned -14 21:47:26 executing program 2: add_key$user(&(0x7f00000003c0)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) semop(0x0, &(0x7f0000000340), 0x21) semtimedop(0x0, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}], 0x1, 0x0) 21:47:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x3000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x4000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1668.656765][T21102] binder: 21100:21102 ioctl c0306201 20000540 returned -14 [ 1668.843912][T21107] binder: 21106:21107 ioctl c0306201 20000540 returned -14 21:47:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x5000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) read(r1, &(0x7f0000000540)=""/168, 0xa8) [ 1669.081443][T21112] binder: 21109:21112 ioctl c0306201 20000540 returned -14 21:47:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x6000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r2, &(0x7f00000001c0)={{0x1b, 0x5d, 0x50, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x6c}, [{0x6, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x78) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) write$9p(r1, &(0x7f0000000040)="bf30136e15637b1a602e0af0013ee443c1ab89aae3f5a0c3fd03238ac4955932566f4c1768e4aa49d85da3eb9b3aa44d1d2a05b14ba5dd35cfde", 0x3a) prctl$PR_GET_TID_ADDRESS(0x25, &(0x7f0000000000)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ptrace$getregs(0xe, r3, 0x3ff, &(0x7f00000000c0)=""/100) [ 1669.272395][T21121] binder: 21119:21121 ioctl c0306201 20000540 returned -14 21:47:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x7000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7f, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, @fixed={[], 0x12}, 0x6}, 0xa) read(r1, &(0x7f0000000540)=""/168, 0xa8) syz_genetlink_get_family_id$smc(&(0x7f00000009c0)='SMC_PNETID\x00') setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) write$uinput_user_dev(r4, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) write$uinput_user_dev(r5, &(0x7f0000000040)={'syz1\x00'}, 0x45c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000640)={'syz1\x00'}, 0x45c) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="2e00018101", @ANYRES16=r3, @ANYBLOB="7044ab51b5c2c594c3e8a95c82eeb0981bd1807e20ceb2c864bc35f7f298054a28bf08aa351d378f6320a23c06d92467848a5f3a71e3443c70162774638e627079c0a58ec21ff247861e451c2bdb1c1bb1c1be57cdb4334542c2185037163d280e5c80060411ce79b53427d544de3e5e7d3fdb4d9babcb9d1167"], 0x3}, 0x1, 0x0, 0x0, 0x200088c4}, 0x8001) 21:47:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85, 0x0, 0x0, 0x400000}, @flat=@weak_handle, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) [ 1669.541412][T21138] binder: 21135:21138 ioctl c0306201 20000540 returned -14 [ 1669.584754][T21140] binder: 21139:21140 ioctl c0306201 20000540 returned -14 21:47:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x8000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:27 executing program 2: prctl$PR_GET_TID_ADDRESS(0x19, &(0x7f0000000040)) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x301082, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r0, r1}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x7, 0x0) semop(r5, &(0x7f0000000340), 0x21) semtimedop(r5, &(0x7f0000000280)=[{0x1, 0x3, 0x1000}, {0x4, 0x9, 0x800}], 0x2, &(0x7f0000000340)) sendmmsg(r4, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1405, 0x800, 0x70bd25, 0x25dfdbff, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4048811) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)="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", 0x801, r2) keyctl$negate(0xd, r0, 0x9, r2) [ 1669.760278][T21146] binder: 21145:21146 ioctl c0306201 20000540 returned -14 21:47:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x20000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r5, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r5, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r3, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000100)) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000080)) [ 1669.956856][T21153] binder: 21152:21153 ioctl c0306201 20000540 returned -14 21:47:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="0e"}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0xd, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440000000000063404001"], 0x0, 0x0, 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000680)={@flat=@handle={0x73622a85}, @flat=@weak_handle={0x77682a85, 0x3f000000}, @flat=@weak_handle}, &(0x7f0000000500)={0x0, 0x18, 0xffffffffffffff9d}}, 0x2}], 0x2, 0x0, 0x0}) 21:47:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) dup2(r0, r1) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x63, 0x103001) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000640)={'syz1\x00'}, 0x45c) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ubi_ctrl\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x100, 0x401, 0x25dfdbfb, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x20}}, 0x4048000) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000b40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000600)={0x14, r4, 0x100, 0x67e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) write$uinput_user_dev(r2, &(0x7f0000000040)={'syz1\x00'}, 0x45c) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000100)) [ 1670.169082][T21159] binder: 21158:21159 ioctl c0306201 20000540 returned -14 [ 1670.255774][T21123] BUG: unable to handle page fault for address: 000000010000000e [ 1670.255785][T21123] #PF: supervisor write access in kernel mode [ 1670.255793][T21123] #PF: error_code(0x0002) - not-present page [ 1670.255799][T21123] PGD 1d614a067 P4D 1d614a067 PUD 0 [ 1670.255820][T21123] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1670.255833][T21123] CPU: 0 PID: 21123 Comm: syz-executor.0 Not tainted 5.7.0-rc3-syzkaller #0 [ 1670.255841][T21123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.255909][T21123] RIP: 0010:insert_char+0x230/0x3f0 [ 1670.255923][T21123] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 19 01 00 00 d1 eb 41 0f b7 87 18 04 00 00 4c 89 f7 89 d9 66 ab 49 8d bf d0 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 1670.255931][T21123] RSP: 0018:ffffc9001c01f8e0 EFLAGS: 00010202 [ 1670.255941][T21123] RAX: 0000000000000720 RBX: 0000000000000001 RCX: 0000000000000001 [ 1670.255949][T21123] RDX: 1ffff11008c4d283 RSI: 000000010000000e RDI: 000000010000000e [ 1670.255957][T21123] RBP: 0000000000000000 R08: 000000010000000e R09: fffffbfff1512999 [ 1670.255965][T21123] R10: ffffffff8a894cc7 R11: fffffbfff1512998 R12: ffff8880462693dc [ 1670.255973][T21123] R13: ffff888046269384 R14: 000000010000000e R15: ffff888046269000 [ 1670.255983][T21123] FS: 00007f0b8311c700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1670.255991][T21123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1670.255999][T21123] CR2: 000000010000000e CR3: 00000001d61e0000 CR4: 00000000001406f0 [ 1670.256009][T21123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1670.256016][T21123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1670.256020][T21123] Call Trace: [ 1670.256040][T21123] do_con_trol+0x3e56/0x5d10 [ 1670.256058][T21123] ? reset_palette+0x180/0x180 [ 1670.256082][T21123] ? lock_downgrade+0x840/0x840 [ 1670.256096][T21123] ? lock_downgrade+0x840/0x840 [ 1670.256108][T21123] ? rwlock_bug.part.0+0x90/0x90 [ 1670.256142][T21123] ? notifier_call_chain+0x1d8/0x230 [ 1670.256164][T21123] do_con_write.part.0+0xf34/0x1dc0 [ 1670.256248][T21123] ? n_tty_write+0x1de/0xf90 [ 1670.256263][T21123] ? do_con_trol+0x5d10/0x5d10 [ 1670.256275][T21123] ? rwlock_bug.part.0+0x90/0x90 [ 1670.256295][T21123] ? mark_held_locks+0x9f/0xe0 [ 1670.256311][T21123] con_write+0x41/0xe0 [ 1670.256326][T21123] n_tty_write+0x3f0/0xf90 [ 1670.256347][T21123] ? n_tty_read+0x1b30/0x1b30 [ 1670.256407][T21123] ? prepare_to_wait_exclusive+0x2c0/0x2c0 [ 1670.256424][T21123] ? __might_fault+0x190/0x1d0 [ 1670.256440][T21123] tty_write+0x495/0x800 [ 1670.256455][T21123] ? n_tty_read+0x1b30/0x1b30 [ 1670.256472][T21123] ? put_tty_driver+0x20/0x20 [ 1670.256486][T21123] __vfs_write+0x76/0x100 [ 1670.256502][T21123] vfs_write+0x268/0x5d0 [ 1670.256518][T21123] ksys_write+0x12d/0x250 [ 1670.256533][T21123] ? __ia32_sys_read+0xb0/0xb0 [ 1670.256547][T21123] ? __ia32_sys_clock_settime+0x260/0x260 [ 1670.256561][T21123] ? trace_hardirqs_off_caller+0x55/0x230 [ 1670.256581][T21123] do_syscall_64+0xf6/0x7d0 [ 1670.256602][T21123] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1670.256612][T21123] RIP: 0033:0x45c829 [ 1670.256626][T21123] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1670.256634][T21123] RSP: 002b:00007f0b8311bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1670.256647][T21123] RAX: ffffffffffffffda RBX: 000000000050c240 RCX: 000000000045c829 [ 1670.256655][T21123] RDX: 0000000000000078 RSI: 00000000200001c0 RDI: 0000000000000006 [ 1670.256663][T21123] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1670.256671][T21123] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1670.256679][T21123] R13: 0000000000000cde R14: 00000000004cf088 R15: 00007f0b8311c6d4 [ 1670.256692][T21123] Modules linked in: [ 1670.256702][T21123] CR2: 000000010000000e [ 1670.256746][T21123] ---[ end trace bbc24ab7cdce132e ]--- [ 1670.256762][T21123] RIP: 0010:insert_char+0x230/0x3f0 [ 1670.256777][T21123] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 01 0f 8e 19 01 00 00 d1 eb 41 0f b7 87 18 04 00 00 4c 89 f7 89 d9 66 ab 49 8d bf d0 04 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 1670.256785][T21123] RSP: 0018:ffffc9001c01f8e0 EFLAGS: 00010202 [ 1670.256796][T21123] RAX: 0000000000000720 RBX: 0000000000000001 RCX: 0000000000000001 [ 1670.256804][T21123] RDX: 1ffff11008c4d283 RSI: 000000010000000e RDI: 000000010000000e [ 1670.256812][T21123] RBP: 0000000000000000 R08: 000000010000000e R09: fffffbfff1512999 [ 1670.256821][T21123] R10: ffffffff8a894cc7 R11: fffffbfff1512998 R12: ffff8880462693dc [ 1670.256830][T21123] R13: ffff888046269384 R14: 000000010000000e R15: ffff888046269000 [ 1670.256841][T21123] FS: 00007f0b8311c700(0000) GS:ffff8880ae600000(0000) knlGS:0000000000000000 [ 1670.256850][T21123] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1670.256857][T21123] CR2: 000000010000000e CR3: 00000001d61e0000 CR4: 00000000001406f0 [ 1670.256868][T21123] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1670.256876][T21123] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1670.256884][T21123] Kernel panic - not syncing: Fatal exception [ 1670.258271][T21123] Kernel Offset: disabled [ 1670.754657][T21123] Rebooting in 86400 seconds..